AWS secretsmanager documentation change
Summary
Expanded rotation template documentation with details about single-user/alternating-user strategies and added generic template information. Removed Python version note.
Security assessment
Enhances documentation about credential rotation strategies (a security best practice) but does not indicate remediation of a security issue. The changes promote secure credential management practices.
Diff
diff --git a/secretsmanager/latest/userguide/reference_available-rotation-templates.md b/secretsmanager/latest/userguide/reference_available-rotation-templates.md index d7ad5f816..ff7fe1d93 100644 --- a//secretsmanager/latest/userguide/reference_available-rotation-templates.md +++ b//secretsmanager/latest/userguide/reference_available-rotation-templates.md @@ -9 +9,14 @@ Amazon RDS and Amazon AuroraAmazon DocumentDBAmazon RedshiftAmazon Timestream fo -For [Rotation by Lambda function](./rotate-secrets_lambda.html), Secrets Manager provides a number of rotation function templates. To use the templates, see: +AWS Secrets Manager provides a set of rotation function templates that help automate the secure management of credentials for various database systems and services. The templates are ready-to-use Lambda functions that implement best practices for credential rotation, helping you maintain your security posture without manual intervention. + +The templates support two primary rotation strategies: + + * _Single-user rotation_ which updates the credentials for a single user. + + * _Alternating-users rotation_ which maintains two separate users to help eliminate downtime during credential changes. + + + + +Secrets Manager also provides a generic template that serves as a starting point for any type of secret. + +To use the templates, see: @@ -18,2 +30,0 @@ For [Rotation by Lambda function](./rotate-secrets_lambda.html), Secrets Manager -The templates support Python 3.9. -