# AWS Secrets Manager Attributes

Schema attributes for resources in the **AWS Secrets Manager** dataset.

## AWS Secrets Manager Secret

**Resource ID**: `aws:secretsmanager-secret`

**Resource type**: `std:credential`

**Identity attribute**: `arn`

**Display attribute**: `name`

| Attribute | Type | Description |
| --- | --- | --- |
| `identity` | string | Amazon Resource Name of the secret. |
| `arn` | string | Amazon Resource Name of the secret. |
| `name` | string | Friendly name of the secret. |
| `description` | string | Description of the secret. |
| `awsAccountId` | string | AWS account ID where the secret resides. |
| `awsRegion` | string | AWS region where the secret resides. |
| `createdDate` | string | Date the secret was created. |
| `deletedDate` | string | Date deletion of the secret was requested. |
| `kmsKeyId` | string | The KMS key used to encrypt the secret value. |
| `lastAccessedDate` | string | Date the secret value was last retrieved. |
| `lastChangedDate` | string | Date the secret was last modified. |
| `lastRotatedDate` | string | Date the secret was last rotated. |
| `nextRotationDate` | string | Date the secret is next scheduled to rotate. |
| `owningService` | string | AWS service that created and manages the secret, if any. |
| `primaryRegion` | string | Primary region of a replicated secret. |
| `rotationEnabled` | boolean | Whether automatic rotation is enabled for the secret. |
| `rotationLambdaARN` | string | ARN of the Lambda function that rotates the secret. |
| `rotationAutomaticallyAfterDays` | string | Number of days between automatic rotations of the secret. |
| `rotationDuration` | string | Length of the rotation window for the secret. |
| `rotationScheduleExpression` | string | Schedule expression that defines when the secret rotates. |
| `externalSecretRotationRoleArn` | string | ARN of the role used for externally managed rotation. |
| `externalSecretRotationMetadata` | string | Metadata describing externally managed rotation of the secret. |
| `type` | string | Type of the secret. |
| `versionIdsToStages` | string | Version identifiers of the secret mapped to their staging labels. |
| `tags` | string | The tags applied to the secret. |
| `replicationStatus` | string | Replication state of the secret in each replica region. |
| `resourcePolicy` | string | JSON resource policy returned by GetResourcePolicy. |
| `spBusinessApplication` | string | SailPoint business application of the secret. Always AWS Secrets Manager. |