AWS secretsmanager documentation change
Summary
Clarified the text about rotation failures, specifying they can occur due to Lambda function or Secrets Manager issues and that retries happen during open rotation windows.
Security assessment
This change adds more detailed documentation about the secret rotation process, which is a security feature. It clarifies failure modes and retry behavior, improving operational understanding of a security-critical process. There is no indication it addresses a specific security vulnerability.
Diff
diff --git a/secretsmanager/latest/userguide/rotate-secrets_lambda.md b/secretsmanager/latest/userguide/rotate-secrets_lambda.md index 78fc5df74..f18389bb6 100644 --- a//secretsmanager/latest/userguide/rotate-secrets_lambda.md +++ b//secretsmanager/latest/userguide/rotate-secrets_lambda.md @@ -40 +40 @@ During rotation, Secrets Manager calls the same function several times, each tim -If any rotation step fails, Secrets Manager retries the entire rotation process multiple times. +Rotation failures can occur because of issues with your Lambda function or with Secrets Manager. If any rotation step fails, Secrets Manager retries the entire rotation process multiple times during the open rotation windows on the secret.