AWS Security ChangesHomeSearch

AWS secretsmanager documentation change

Service: secretsmanager · 2026-04-22 · Documentation low

File: secretsmanager/latest/userguide/rotate-secrets_turn-on-cli.md

Summary

Updated Lambda runtime from Python 3.7 to 3.12, corrected handler function reference, and fixed ARN placeholder in CLI examples for secret rotation

Security assessment

The changes update the Python runtime version and correct syntax errors in examples. While Python 3.12 includes security improvements over 3.7, there is no explicit mention of security vulnerabilities being addressed. The ARN placeholder change from 'Region' to 'aws-region' is a documentation formatting improvement without security implications.

Diff

diff --git a/secretsmanager/latest/userguide/rotate-secrets_turn-on-cli.md b/secretsmanager/latest/userguide/rotate-secrets_turn-on-cli.md
index b57b359f3..f0c7f5c71 100644
--- a//secretsmanager/latest/userguide/rotate-secrets_turn-on-cli.md
+++ b//secretsmanager/latest/userguide/rotate-secrets_turn-on-cli.md
@@ -96 +96 @@ In this step, you create the Lambda function using the ZIP file you created in S
-      --runtime python3.7 \
+      --runtime python3.12 \
@@ -98 +98 @@ In this step, you create the Lambda function using the ZIP file you created in S
-      --handler .handler \
+      --handler lambda_function.lambda_handler \
@@ -124 +124 @@ To turn on automatic rotation for your secret, call [`rotate-secret`](https://do
-        --rotation-lambda-arn arn:aws:lambda:Region:123456789012:function:my-rotation-function \
+        --rotation-lambda-arn arn:aws:lambda:aws-region:123456789012:function:my-rotation-function \