Secret Rotation

Secret rotation is the automated or manual process of periodically replacing credentials, API keys, certificates, and tokens with new values to limit the window of exposure if a secret is compromised. AWS Secrets Manager, HashiCorp Vault, and Azure Key Vault provide automated rotation with built-in integrations for common secret types (RDS passwords, API keys).

Automated rotation eliminates the operational friction that causes organizations to leave credentials unchanged for years.