mod-aws-cdk-secret-manager