secretsmanager:GetSecretValue

secretsmanager:GetSecretValue

Retrieves the contents of the encrypted fields from the specified version of a secret.

Supported Resource-Level Permissions

  • arn:aws:secretsmanager:$region:$account:secret:$secret_name

Supported Service Specific Conditions

  • secretsmanager:SecretId
  • secretsmanager:VersionId
  • secretsmanager:VersionStage
  • secretsmanager:AllowRotationLambdaArn
  • secretsmanager:ResourceTag/$tag-key