From the course: Complete Guide to AWS Security and Compliance Management

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Enabling autorotation with Secrets Manager

Enabling autorotation with Secrets Manager - Amazon Web Services (AWS) Tutorial

From the course: Complete Guide to AWS Security and Compliance Management

Start my 1-month free trial Buy for my team

Enabling autorotation with Secrets Manager

“

- [Presenter] Secrets Manager allows you to auto-rotate secrets for AWS Native services. Let's explore some considerations and implications before enabling auto-rotation. Consider the following scenario. The original password for an RDS database has been stored as a Secrets Manager Secret. There is an EC2 instance running in that region, which needs access to that database, to facilitate the use of Secrets Manager, an IAM role has been assigned to this server. In this case, the role contains an IAM policy with permissions to get the secret value for the dev-postgres access secret. This allows the EC2 instance to open a database connection and interact with the Postgres database. In order to improve the operational security posture. A decision has been made to auto-rotate the password for this database every 30 days. When enabling auto-rotation, it's possible to immediately rotate the secret or rotate it at a future point in time. When the password does rotate, the original password is…

Contents