Home/Templates/Somewhere to keep secrets that rotates them
Somewhere to keep secrets that rotates them
A managed store with automatic rotation, an access log, and a way to take access away.
Terraform
Why bother
Secrets pasted into pipeline settings and environment variables never get rotated, nobody can tell who read them, and there is no way to pull them back. A managed store fixes all three.
How you know it worked
Rotate one secret. The application should pick up the new value without a redeploy.
Not written yet
No code exists for this one. It is listed so the gap shows on the coverage table. When it is written, each platform will use:
| Platform | Service |
|---|---|
| AWS | Secrets Manager with a rotation function |
| Azure | Key Vault with role-based access |
| Google Cloud | Secret Manager with versions and conditional access |
| Oracle Cloud | OCI Vault with secret rotation |