secretsmanager: secretString should be specified directly.

[acomagu]

This should work:

new secretsmanager.Secret(this, 'TemplatedSecret', {
    secretString: 'hoge',
});

The document explains why not that "this will almost always lead to the secret being surfaced in plain text and possibly committed to your source control".

But I think not "almost always". I think the one of benefits of CDK is we can do what we want programmatically in deployment process, unlike other YAML solutions. We can prepare secret string from environment variable, API response, user prompting and so on.

[skinny85]

Duplicate of #5810