Add to AWS challenge 11 reason
-Secrets management is more than storing it:
+Secrets management is more than secure storage:
As you can tell by now: there are many ways to get to a secret: whether hardcoded, stored in a misconfigured third party solution, or stored correctly, but with the wrong IAM access rights in accounts next to it. You will, by now see, why we say that "your security maturity reflects in your secrets management".
+
+In this specific case, this kind of role assumption should be impossible given the proper configuration, but it's a good idea to monitor for these events and flag them as suspicious.
