IAM policy: can't specify Secrets Manager secret ARN with "/" in the name

Question

I have a secret in Secrets Manager whose ARN includes a slash (e.g. service/postgres). This triggers a validation error in the console when I try to specify the ARN in a policy in IAM (GetSecretValue).

Removing the slash works fine, but the secret name I want to use contains a slash. I have other secrets that I've created previously that have a slash in the secret ARN. I'm pretty sure this is just a simple validation bug, and I wanted to report.

Answer

Hi,

Slashes are accepted in ARNs: see https://docs.aws.amazon.com/IAM/latest/UserGuide/reference-arns.html section "Paths in ARN".

So, yes, it's probably a bug that you encounter. But, the place to report it is not re:Post: it is not monitored by AWS service teams for bug reports. You have to open a ticket via the console of your AWS account,

Thanks in advance!

Didier

IAM policy: can't specify Secrets Manager secret ARN with "/" in the name

Relevant content