How AWS Direct Connect uses AWS Secrets Manager

Direct Connect links your internal network to an Direct Connect location over a standard Ethernet fiber-optic cable. With this connection, you can create virtual interfaces directly to public AWS services.

Direct Connect stores a connectivity association key name and connectivity association key pair (CKN/CAK pair) in a managed secret with the prefix directconnect. The cost of the secret is included with the charge for Direct Connect. To update the secret, you must use Direct Connect rather than Secrets Manager. For more information, see Associate a MACsec CKN/CAK with a LAG in the Direct Connect User Guide.