INTRODUCING AN ENHANCED VERSION OF THE AWS SECRETS MANAGER TRANSFORM

Summary from the TLDR InfoSec newsletter

AWS Secrets Manager offers transforms that will add a nested CloudFormation stack for HostedLambdaRotation that allows for pre-built Lambdas for secrets rotations for a subset of supported secrets. AWS has now enhanced this offering to support automatic upgrades of the Lambda functions as well as more CloudFormation resource attributes. The blog post contains upgrade instructions but also notes that the new transforms are not backwards compatible.