AWS Secrets Manager
Rotation
This package has helpers for AWS Secrets Manager SDK which makes rotating secrets from Lambda easier.
Usage
- Initial a rotation cycle with event given by AWS Secrets Manager in Lambda handler.
- Call each steps with its methods.
Steps
-
createSecret
stores the new secret to AWS Secrets Manager. -
setSecret
retrieves the new secret from AWS Secrets Manager for setting it in the external service. -
testSecret
retrieves the new secret from AWS Secrets Manager for testing it in the external service. -
finishSecret
set the current version to the new secret in AWS Secrets Manager. -
revokePreviousSecret
retrieves the new secret from AWS Secrets Manager for revoking it in the external service. (Optional, needs be called right afterfinishSecret
)