The AWS Secrets Manager console was updated to accept a custom AWS KMS key ARN when creating secrets, extending beyond the prior dropdown limitation to keys within the same account. This enhancement aligns console functionality with existing API capabilities, allowing keys from different AWS accounts to be used directly.
This feature facilitates cross-account encryption workflows and broadens key management flexibility for customers managing secrets in multi-account environments. It is available in all AWS regions supporting Secrets Manager, improving user experience and encryption control as per AWS documentation.
Source & further reading
AWS Secrets Manager console now supports custom input for AWS KMS keys ↗Source published 2026-04-03. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.