A Lambda function needs to read the current value of exactly one AWS Secrets Manager secret at startup. Which least-privilege IAM permission (action and resource scope) should you grant to the Lambda execution role?
Select one:
The trap here is that candidates may confuse `ListSecrets` or `DescribeSecret` with `GetSecretValue`...