drop aws secrets manager cloudtrail export · parse secret arn + caller + get/put timeline · runs locally
drop aws secrets manager cloudtrail export · local only
heuristic screener · vendor schema varies · not definitive proof