AWS Secrets Manager now enables you to attach resource-based policies to secrets from the AWS Secrets Manager console and uses Zelkova to validate these policies
The AWS Secrets Manager console now supports attaching resource-based policies to your secrets, enabling you to access secrets across AWS accounts securely and easily. The Secrets Manager console also uses Zelkova, an automated reasoning engine, to validate and block automatically policies that may grant broad access to your secrets across AWS accounts. This integration further raises the security bar for your organization and makes it easier to follow the security best practice of granting least privilege access.
Source:: Amazon AWS