Best practice rules for AWS Secrets Manager
To configure existing Amazon Secrets Manager secrets to encrypt their data using customer-managed KMS Customer Master Keys (CMKs)
medium.com