This template creates a secret in AWS Secrets Manager and attaches a resource-based policy to it. The resource-based policy denies the 'DeleteSecret' action for all principals except the root user of the AWS account.