Big ID Refresh Token - AWS Secrets Manager

Big ID Refresh Token

Secret Value Fields

The following are the fields that must be contained in the Secrets Manager secret:

{ "hostname": "Host Name", "refreshToken": "Refresh Token" }
hostname

This is the hostname where your BigID instance is hosted. You must enter the fully qualified domain name of your instance.

refreshToken

The JWT user refresh token generated in the BigID Console via Administration → Access Management → Select User → Generate Token → Save

Usage Flow

You can create your secret using the CreateSecret call with the secret value containing the fields mentioned above and secret type as BigIDClientSecret. The rotation configurations can be set using a RotateSecret call. You must also provide a role ARN in the RotateSecret call which grants the service the required permissions to rotate the secret. For example of a permissions policy see Security and Permissions. Note that the rotation metadata field can be left empty for this partner.