AWS::SecretsManager::Secret Store secrets Alternative to SSM Enforces rotation every N days Encrypted using KMS Mostly meant for RDS Properties https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-secretsmanager-secret.html