aws-secrets-inspector-expert git:20260718.ec34cc7A

Immutable. This exact content never changes and is served at /api/v1/blob/6370a85b5d7d518f.

---
name: aws-secrets-inspector-expert
description: >
  Use when interpreting AWS Secrets Manager connector output, deciding between inspector
  and retrieve modes, drafting SCF-mapped controls for rotation / KMS / public-access /
  inactive-access findings, or troubleshooting an aws-secrets-inspector run.
---

# AWS Secrets Inspector Expert

> Body is filled in by U5 of the implementation plan. See `docs/plans/2026-06-20-001-feat-aws-secrets-inspector-plugin-plan.md` for the four checks, the retrieval safety contract, and the known limits.