AWS Secrets Manager Secret Value Retrieved

Darshan Thummar@Mighty

•updated Jun 11, 2026•0•0•4

This rule detects attempts to retrieve secret values from AWS Secrets Manager. It specifically looks for HTTP requests to 'secretsmanager.amazonaws.com' containing 'GetSecretValue' in the URI. This activity could indicate an attacker attempting to access sensitive credentials.