open-vault/website/source/api/secret
Joel Thompson 5e6f8904d8 Add AWS Secret Engine Root Credential Rotation (#5140)
* Add AWS Secret Engine Root Credential Rotation

This allows the AWS Secret Engine to rotate its credentials used to
access AWS. This will only work when the AWS Secret Engine has been
provided explicit IAM credentials via the config/root endpoint, and
further, when the IAM credentials provided are the only access key on
the IAM user associated wtih the access key (because AWS allows a
maximum of 2 access keys per user).

Fixes #4385

* Add test for AWS root credential rotation

Also fix a typo in the root credential rotation code

* Add docs for AWS root rotation

* Add locks around reading and writing config/root

And wire the backend up in a bunch of places so the config can get the
lock

* Respond to PR feedback

* Fix casing in error messages

* Fix merge errors

* Fix locking bugs
2018-09-26 07:10:00 -07:00
..
ad use ldaps in docs (#5180) 2018-08-24 10:36:20 -07:00
alicloud AliCloud Secrets Docs (#5351) 2018-09-19 08:42:59 -07:00
aws Add AWS Secret Engine Root Credential Rotation (#5140) 2018-09-26 07:10:00 -07:00
azure Fix Azure Secrets API example 2018-08-27 20:44:00 -06:00
cassandra Drop vault.rocks (#4186) 2018-03-23 11:41:51 -04:00
consul Drop vault.rocks (#4186) 2018-03-23 11:41:51 -04:00
cubbyhole Drop vault.rocks (#4186) 2018-03-23 11:41:51 -04:00
databases Docs: clarify max_ttl in Database Secrets Create (#5311) 2018-09-11 19:55:15 -04:00
gcp Docs PR for GCP secrets backend access token changes (#5366) 2018-09-21 10:31:49 -07:00
identity Support operating on entities and groups by their names (#5355) 2018-09-25 12:28:28 -07:00
kv Update kv-v2.html.md (#4614) 2018-05-24 12:44:44 -04:00
mongodb Drop vault.rocks (#4186) 2018-03-23 11:41:51 -04:00
mssql Drop vault.rocks (#4186) 2018-03-23 11:41:51 -04:00
mysql Drop vault.rocks (#4186) 2018-03-23 11:41:51 -04:00
nomad [WIP] Support custom max Nomad token name length [supersedes https://github.com/hashicorp/vault/pull/4361] (#5117) 2018-08-16 15:48:23 -04:00
pki Remove certificates from store if tidying revoked certificates (#5231) 2018-09-05 11:47:27 -04:00
postgresql Drop vault.rocks (#4186) 2018-03-23 11:41:51 -04:00
rabbitmq Drop vault.rocks (#4186) 2018-03-23 11:41:51 -04:00
ssh Drop vault.rocks (#4186) 2018-03-23 11:41:51 -04:00
totp Drop vault.rocks (#4186) 2018-03-23 11:41:51 -04:00
transit Allow force restore for Transit Key Restores (#5382) 2018-09-25 15:20:59 -05:00
index.html.md Resolve the most painful merge conflict known on earth 2017-10-24 09:34:12 -04:00