...
Remediation Steps:
Perform following to disable public access to cloud trail bucket set CMK for SM secrets :
Login to the AWS Management Console at https://console.aws.amazon.com
Go to Secret Manager in services
Click on the secret to be modified.
Click on Actions and select Edit encryption key.
Select an appropriate KMS Customer Managed Key (CMK) from the list.
Check Create new version of secret with new encryption key option.
Click Save.
...