AWS Secrets Manager integrates with EventBridge for secret update notifications
AWS Secrets Manager now publishes events directly to Amazon EventBridge when secret values change, simplifying real-time monitoring and response. This eliminates the need to parse CloudTrail logs, allowing for more direct event-driven workflows. Developers can configure EventBridge rules to trigger actions like Lambda functions or SNS topics upon secret updates, enabling proactive application refreshes or service restarts. This feature is available across all AWS Regions at no extra cost.
- →EventBridge integration for secret update notifications
- →Event-driven workflows for secret updates
- →Simplified secret change detection
- →Automatic publishing and availability
Features (2) ›
- EventBridge integration for secret update notifications
AWS Secrets Manager now automatically publishes events to Amazon EventBridge whenever secret values change, enabling direct event-driven workflows for responding to updates. This replaces the previous method of parsing CloudTrail events.
- Event-driven workflows for secret updates
Developers can leverage EventBridge rules to route secret update notifications to targets like AWS Lambda, Amazon SNS, Amazon SQS, or AWS Step Functions. This enables proactive actions such as refreshing cached credentials or restarting dependent services.
Enhancements (1) ›
- Simplified secret change detection
EventBridge rules can now be used to directly detect active secret value changes, such as during rotation, simplifying the process compared to matching multiple API events.
Notes (1) ›
- Automatic publishing and availability
Secret update notifications are published to the default event bus automatically without additional configuration. This feature is available in all AWS Regions where AWS Secrets Manager is offered and incurs no extra cost.
https://aws.amazon.com/about-aws/whats-new/2026/07/secrets-manager-update-notifications
Related releases
- AWS Weekly Roundup: Local Zone in Athens, Claude Opus 5 on AWS, Lambda Durable Execution for .NET AWS News Blog ·
- AWS Lambda Managed Instances logs now available in CloudWatch AWS What's New ·
- AWS Lambda Durable Execution SDK for .NET now GA AWS What's New ·
- AWS Lambda durable functions support customer-managed KMS encryption AWS What's New ·
- Amazon ECS advanced deployment strategies now available in AWS European Sovereign Cloud AWS What's New ·
- Amazon RDS for SQL Server adds support for SQL Server 2025 AWS What's New ·