# Secrets Manager compatibility, v0.0.1-alpha.44

> Compatibility test results for Secrets Manager in Overcast v0.0.1-alpha.44.

40 tests. Of the 279 results that measure Overcast, 279 pass (100%). 1 tests have a result Overcast has to act on, listed below with the evidence.

The overview, with every service, is at https://overcast.sh/compat/index.md.

## Tests Overcast does not yet pass

### UntagResource

Group `secretsmanager-gen-secret`.

- AWS SDK for Rust: New test, still soaking. absent at `$.Tags`: expected a list, actual null.

## Not tested

Operations with no test. The generator declined to write one, for the reason given.

- RemoveRegionsFromReplication (`never-probe`): Deletes a secret's replicas in other Regions. AWS deletes a replica immediately — there is no recovery window for one — so the secret value stops being readable in that Region the moment the call lands, and nothing in a probe group puts it back.
- ReplicateSecretToRegions (`never-probe`): Creates a copy of the secret in other Regions. Each replica is a separate billed secret that outlives the run, and ForceOverwriteReplicaSecret will overwrite a secret somebody already keeps under that name in the destination Region.
- RestoreSecret (`probe-of-implemented-op`): RestoreSecret is implemented (Supported), so it may not be probed, and no recipe resource gives it a role
- RotateSecret (`probe-of-implemented-op`): RotateSecret is implemented (Supported), so it may not be probed, and no recipe resource gives it a role
- StopReplicationToReplica (`never-probe`): Promotes a replica to a standalone secret and breaks its link to the primary. The split is not reversible — the two secrets diverge from that call onwards — and it is run against the replica, which is somebody's live secret.