Cloudformation fails to get secret for self managed Kafka

[nick-zh]

When i am trying to deploy, it seems CloudFormation is unable to get the secret while creating the EventSourceMapping, i am getting:

Please ensure the role can perform the 'secretsmanager:GetSecretValue' action on your broker in IAM

Can anybody tell me, what kind of policy i am missing?

[nick-zh]

Seems to work when i use the default key for the secret ✌️

If you need the ID, you can find it here in the web console:

KMS > AWS managed keys > aws/secretsmanager