Ensure notification service is enabled in the IBM Cloud Secrets Manager to notify life cycle events

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. Click on Security and click on the Secrets Manager instance that you want to use 4. Click on Settings on the left-hand panel to check if event notification is configured for the instance.

How it is fixed

Fix method: Guidance or infrastructure patch

Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. Click on Security and click on the Secrets Manager instance that you want to use 4. In the Secrets Manager navigation, click Settings. 5. In the Event Notifications section and click Connect. 6. In the side panel, review the source details for the connection. 7. Select the resource group and Event Notifications service instance that you want to connect. 8. To confirm the connection, click `Connect'. 9. A success message is displayed to indicate that Secrets Manager is now connected to Event Notifications. If an IAM authorization between Secrets Manager and Event Notifications doesn't exist in your account, a dialog is displayed. Follow the prompts to grant access between the services. 1. To grant access between Secrets Manager and Event Notifications, click Authorize. 2. In the side panel, select Event Notifications as the target service. 3. From the list of instances, select the Event Notifications service instance that you want to authorize. 4. Select the Event Source Manager role. 5. Click Review. 6. Click Assign.