Managed external secrets Partners
Secrets Manager natively integrates with third party applications to rotate secrets held by the partner. Each partner defines the metadata and secret value fields required to rotate the secrets.
The secret value contains fields that are required for connecting with your third party client and are stored during the CreateSecret call. The rotation metadata holds the fields that are used to update the secret during rotation and are used in the RotateSecret call. These fields will be defined by the integration partner to allow managed rotation flows.
For rotation to function properly, you must provide Secrets Manager with specific permissions to manage the secret lifecycle. For more information see Security and Permissions
The following topics include a description of each of the metadata fields required to rotate the secret as well as a description of each of the fields required in the Secrets Manager secret to rotate.
| Integration Partner | Secret type |
|---|---|
| Salesforce | SalesforceClientSecret |
| BigID | BigIDClientSecret |
| Snowflake | SnowflakeKeyPairAuthentication |