Protecting your secrets from tomorrow's quantum risks

To confirm that hybrid post-quantum key exchange is active for Secrets Manager API calls, follow these steps:

1. Retrieve the Secret Using Your Method of Choice:

   • For Lambda extension: Ensure your Lambda function retrieves secrets from Secrets Manager.
   • For EKS CSI driver: Restart a pod or deploy a new one that mounts a secret.

2. Wait for CloudTrail Logs to Update:

   • Wait approximately 5 minutes after the retrieval attempt for logs to be delivered by CloudTrail.

3. Search for GetSecretValue Events in CloudTrail:

   • Using AWS Management Console:

     1. Open the CloudTrail console.
     2. Go to Event History and filter events by selecting "Event name" as GetSecretValue.

     ![Figure 1: Search CloudTrail event history by event name](https://d2908q01vomqb2.cloudfront.net/22d200f8670dbdb3e253a90eee5098477c95c23d/2026/04/23/Figure1-5.png

Read the full article at AWS Security Blog

---

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.