in provider/secret_descriptor.go [149:155]
func (p *SecretDescriptor) getObjectType() (otype string) { oType := p.ObjectType if len(oType) == 0 { oType = strings.Split(p.ObjectName, ":")[2] // Other checks guarantee ARN } return oType }