secretsmanager:DescribeSecret

secretsmanager:DescribeSecret

Retrieves the details of a secret. It does not include the encrypted fields.

Supported Resource-Level Permissions

  • arn:aws:secretsmanager:$region:$account:secret:$secret_name

Supported Service Specific Conditions

  • secretsmanager:SecretId
  • secretsmanager:AllowRotationLambdaArn
  • secretsmanager:RecoveryWindowInDays
  • secretsmanager:ForceDeleteWithoutRecovery
  • secretsmanager:ResourceTag/$tag-key