AWS Secrets Manager GetSecretValue Call via Python Boto3 Script

Ibrahim Saud@tektrix

•updated 22 days ago•0•0•1

Detects 'GetSecretValue' API calls to AWS Secrets Manager originating from programmatic agents like Boto3, Python requests, or the AWS CLI. This monitors for automated retrieval of stored secrets, which may indicate unauthorized credential access or exfiltration from an AWS environment.