@cloud-copilot/iam-data/data/resourceTypes/secretsmanager.json

AWS IAM Data

{
  "secret": {
    "key": "Secret",
    "arn": "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:${SecretId}",
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys",
      "secretsmanager:ResourceTag/tag-key",
      "secretsmanager:resource/AllowRotationLambdaArn"
    ]
  }
}