AWS Secrets Manager integrates with EventBridge for secret update notifications
AWS Secrets Manager now publishes events directly to Amazon EventBridge when secret values change, simplifying real-time monitoring and response. This eliminates the need to parse CloudTrail logs, allowing for more direct event-driven workflows. Developers can configure EventBridge rules to trigger actions like Lambda functions or SNS topics upon secret updates, enabling proactive application refreshes or service restarts. This feature is available across all AWS Regions at no extra cost.
- →EventBridge integration for secret update notifications
- →Event-driven workflows for secret updates
- →Simplified secret change detection
- →Automatic publishing and availability
Features (2) ›
- EventBridge integration for secret update notifications
AWS Secrets Manager now automatically publishes events to Amazon EventBridge whenever secret values change, enabling direct event-driven workflows for responding to updates. This replaces the previous method of parsing CloudTrail events.
- Event-driven workflows for secret updates
Developers can leverage EventBridge rules to route secret update notifications to targets like AWS Lambda, Amazon SNS, Amazon SQS, or AWS Step Functions. This enables proactive actions such as refreshing cached credentials or restarting dependent services.
Enhancements (1) ›
- Simplified secret change detection
EventBridge rules can now be used to directly detect active secret value changes, such as during rotation, simplifying the process compared to matching multiple API events.
Notes (1) ›
- Automatic publishing and availability
Secret update notifications are published to the default event bus automatically without additional configuration. This feature is available in all AWS Regions where AWS Secrets Manager is offered and incurs no extra cost.
https://aws.amazon.com/about-aws/whats-new/2026/07/secrets-manager-update-notifications
Related releases
- AWS Lambda recursive loop detection now available in Europe Sovereign Cloud AWS What's New ·
- AWS Lambda Durable Functions Integrate with Pydantic AI for Fault-Tolerant Agents AWS What's New ·
- AWS Lambda now supports 90-minute function timeouts on Managed Instances AWS What's New ·
- AWS Lambda Managed Instances now support Graviton5-powered EC2 instances AWS What's New ·
- AWS adds enhanced smart cropping, optimization, and a playground to CloudFront Dynamic Image Transformation AWS What's New ·
- AWS Enhances CloudFront Dynamic Image Transformation with Four New Features AWS What's New ·