Help Center> Data Encryption Workshop> Best Practices> Secret Management> Rotating Secrets> Overview
Updated on 2022-12-12 GMT+08:00
View PDF

Overview

If you have not updated secrets for a long time, important information (such as important passwords, tokens, certificates, SSH keys, and API keys) protected by these secrets are exposed to leakage risks. Periodically rotating secrets improves the security of protected plaintext information.

HUAWEI CLOUD provides two secret rotation policies:

You can select a rotation policy as needed.

Procedure

  1. The administrator adds a secret version and updates its content on the console or via an API.
  2. The application calls a CSMS API to obtain the latest secret version or the secret of a specified version status, and then rotate the secret.
  3. Regularly repeat steps 1 and 2 to rotate secrets.
Parent topic: Rotating Secrets