AWS Secrets Manager can now replicate a primary secret to a secondary AWS account. The copy stays in sync whenever the original changes, including rotations. Each replica is a separate resource encrypted with a customer‑managed KMS key owned by the replica account. Teams can keep a live backup in a recovery account that is isolated from ransomware or a compromised primary account. The feature works in every AWS Region where Secrets Manager is offered.
Why it matters
Security teams can protect critical credentials by keeping an up‑to‑date copy in a separate account for quick recovery.
