secret from SecretsManager not resolved correctly

the secret doesn’t seem to be correctly resolved when used in outputs

Reproduction Steps

const secret = secretsManager.Secret.fromSecretArn(
  this,
  'Secrets',
  'arn:aws:secretsmanager:us-east-1:xxx:secret:yyy-secrets-zzz',
);
new cdk.CfnOutput(this, 'testoutput', {
  value: secret.secretValueFromJson('abcdef').toString(),
});

produces the following output:

app.testoutput = {{resolve:secretsmanager:arn:aws:secretsmanager:us-east-1:xxx:secret:yyy-secrets-zzz:SecretString:abcdef::}}

instead of the actual resolved secret

Environment

using aws-cdk v1.8.0

---

This is 🐛 Bug Report

[itajaja]

that makes sense. my actual use case is to use a secret from secretsManager as a k8s secret using aws-cdk’s addResource functionality. in that case as well the secret is not resolved. what would be a good workflow there?

[adrialucena-seat]

Same use case here. It seems something related to addResource, that doesn’t resolve the value. But using Secret.fromSecretArn to create an environment variable in an ECS task definition works. Any workarround for this?