(@aws-cdk/core): Error: secret id "${Token[Fn::Join.84]}" is not an ARN but contains ":"

[bravogolfgolf]

Reproduction Steps

const secret = new secretsmanager.Secret(this, 'secret', {
  secretName: 'secretName',
  generateSecretString: {
    secretStringTemplate: JSON.stringify({username: 'username'}),
    generateStringKey: 'password',
  },
});
const secretValue = cdk.SecretValue.secretsManager(secret.secretName, {
  jsonField: 'username'
}).toString();
new ssm.StringParameter(this, 'string-parameter', {stringValue: secretValue});

What did you expect to happen?

I would expect name to not cause error.

What actually happened?

Name without ":" errors:
.../node_modules/@aws-cdk/core/lib/secret-value.ts:19
throw new Error('secret id "${secretId}" is not an ARN but contains ":"');

Environment

• CDK CLI Version : 1.118.0
• Framework Version: 1.119.0
• Node.js Version: v14.16.0
• OS: macOS Big Sur 11.5.2 (20G95)
• Language (Version): TypeScript (3.9.7)

Other

I tried using PhysicalName.GENERATE_IF_NEEDED and got this error:
.../node_modules/@aws-cdk/core/lib/private/physical-name-generator.ts:91
throw new Error('Invalid physical name passed to CloudFormation. Use "this.physicalName" instead');
Issue: #16167

---

This is 🐛 Bug Report

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.