Cloud Profiles (AWS) access key rotation

Permanently deleted user

Created January 08, 2021 15:49

Hello!

Is it possible to programmatically change AWS IAM access keys in the cloud profiles settings?
I have found the location of the configuration on the disk (/data/config/projects/<project_name>/pluginData/secure/credentials.json

I am able to decrypt the secrets so I know that's what I'm looking for.
What I would like to do is rotate IAM keys (Lambda) and update TC config with the new configuration (automatically). One approach is to use the API but I can not find out how.

Using this I'm able to list all the properties of a feature, including:

<propertyname="secure:access-id"/>

<propertyname="secure:secret-key"/>

However I don't know how to see the current value/replace with a new one (I get that secrets are omitted but Access Key ID I can see clearly in the GUI)

Is there a sane way of rotating secrets automatically?

Please sign in to leave a comment.