💼 [SecretsManager.3] Remove unused Secrets Manager secrets

• Contextual name: 💼 [SecretsManager.3] Remove unused Secrets Manager secrets
• ID: /frameworks/aws-fsbp-v1.0.0/secrets-manager/03
• Located in: 💼 Secrets Manager

Description

Deleting unused secrets is as important as rotating secrets. Unused secrets can be abused by their former users, who no longer need access to these secrets. Also, as more users get access to a secret, someone might have mishandled and leaked it to an unauthorized entity, which increases the risk of abuse. Deleting unused secrets helps revoke secret access from users who no longer need it. It also helps to reduce the cost of using Secrets Manager. Therefore, it is essential to routinely delete unused secrets.

Similar

• AWS Security Hub
  • https://docs.aws.amazon.com/securityhub/latest/userguide/secretsmanager-controls.html#secretsmanager-3
• Internal
  • ID: dec-c-3c8a6c26

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST SP 800-53 Revision 5 → 💼 AC-2(1) Account Management _ Automated System Account Management		4	16
💼 NIST SP 800-53 Revision 5 → 💼 AC-3(15) Access Enforcement _ Discretionary and Mandatory Access Control			10

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags