Automate Database and AWS Secret Engine root credential rotation

Vault
1

Hi,

Currently, I see there is an end point which Vault offers to rotate root credentials used by secret engines like AWS & Databases. Rather than external triggers, is it possible to schedule rotation with in Vault periodically?

TIA

2

Not currently, though it has been discussed…

There are a few asks for it in GH - https://github.com/hashicorp/vault/issues?q=is%3Aissue+is%3Aopen+periodic

Check out those and see if you can +1 them.

1 Like
3

Thanks @mikegreen. There is a FR https://github.com/hashicorp/vault/issues/7143 already open for this.