secret manager - hide secret in AWS console

Question

I am creating a new secret in AWS secret manager from the AWS console I used default encryption key to encrypt it. When I retrieve the secret from console I see it as plain text. Can the secret be encrypted (not see it as plain text) and saved in AWS console

Answer 1

By default access to AWS secret manager is private and not allow to any IAM users or roles. The fact that you or someone else can view them, means they have been explicitly allowed to access the secrets.

Thus, if you have any users who should not see the secrets, deny them secretsmanager:GetSecretValue permissions or any actions that you don't want them to be able to perform.