My question is related to runtime, for example:
Does it make sense if I save the key in an encrypted file after step 2 and load it in step 4 or should I retrieve the Key at AWS Secret Manager twice and pay for the request multiple times?
You might want to look into client side caching libraries provided by AWS Secrets Manager https://aws.amazon.com/about-aws/whats-new/2019/05/Secrets-Manager-Client-Side-Caching-Libraries-in-Python-NET-Go/