title: Why is it recommended to manually provision pre-existing secrets in AWS SecretsManager as opposed via CDK/Cloudformation?
body: <p>Quote from the <a href="https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_secretsmanager-readme.html" rel="nofollow noreferrer">aws cdk docs</a>:</p>
  <blockquote>
  <p>If you need to use a pre-existing secret, the recommended way is to manually provision the secret in AWS SecretsManager and use the Secret.fromSecretArn or Secret.fromSecretAttributes method to make it available in your CDK Application</p>
  </blockquote>
  <p>Why is that? Is it because it's not ideal to save the plain text secret into code?</p>
  <p>Or we don't want the secret to appear in the cloudformation template?</p>