AWS Secrets Manager Terraform: Least-Privilege Access