I'm not sure what's the best way to do this, but it seems that when granting access to a secret, one needs to specify the random suffix added by AWS SecretsManager. Does that make sense to add it on the method? LMK if I can help with anything. Thanks.