Skip to content

feat(rds,secretsmanager): subnets and endpoint configuration for secret rotation#17363

Merged
mergify[bot] merged 5 commits intoaws:masterfrom
jogold:rds-rotation-subnets
Nov 5, 2021
Merged

feat(rds,secretsmanager): subnets and endpoint configuration for secret rotation#17363
mergify[bot] merged 5 commits intoaws:masterfrom
jogold:rds-rotation-subnets

Conversation

@jogold
Copy link
Copy Markdown
Contributor

@jogold jogold commented Nov 5, 2021

Add options to configure vpc subnet placement and Secrets Manager API
endpoint for the rotation Lambda function.

This is required in some VPC configurations where the database is placed
in subnets without internet connectivity.

Closes #17265


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

…et rotation

Add options to configure vpc subnet placement and Secrets Manager API
endpoint for the rotation Lambda function.

This is required in some VPC configurations where the database is placed
in subnets without internet connectivity.

Closes aws#17265
@gitpod-io
Copy link
Copy Markdown

gitpod-io bot commented Nov 5, 2021

@github-actions github-actions bot added the @aws-cdk/aws-secretsmanager Related to AWS Secrets Manager label Nov 5, 2021
@jogold
Copy link
Copy Markdown
Contributor Author

jogold commented Nov 5, 2021

@skinny85

Copy link
Copy Markdown
Contributor

@skinny85 skinny85 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great as always @jogold. Minor nitpicky comments about not very important things (also as usual, but this time from me 😜).

target: this,
excludeCharacters: DEFAULT_PASSWORD_EXCLUDE_CHARS,
...options,
excludeCharacters: options.excludeCharacters ?? DEFAULT_PASSWORD_EXCLUDE_CHARS,
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I actually like the old code more 😕 (it's very obvious in the old one that options.excludeCharacters will be taken into account, while you would have to look at the definition of RotationSingleUserOptions and SecretRotationProps to know that happens in the new code).

Can we revert this?

});
});

test('addRotationSingleUser() with options', () => {
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
test('addRotationSingleUser() with options', () => {
test('addRotationSingleUser() with VPC Subnets', () => {

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The other options (automaticallyAfter and excludeCharacters) are tested here too.

});
});

test('addRotationSingleUser() with options', () => {
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
test('addRotationSingleUser() with options', () => {
test('addRotationSingleUser() with VPC Subnets', () => {

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The other options (automaticallyAfter and excludeCharacters) are tested here too.

@mergify mergify bot dismissed skinny85’s stale review November 5, 2021 19:40

Pull request has been modified.

@jogold jogold requested a review from skinny85 November 5, 2021 19:47
@mergify
Copy link
Copy Markdown
Contributor

mergify bot commented Nov 5, 2021

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@aws-cdk-automation
Copy link
Copy Markdown
Collaborator

AWS CodeBuild CI Report

  • CodeBuild project: AutoBuildProject89A8053A-LhjRyN9kxr8o
  • Commit ID: 8c35f39
  • Result: SUCCEEDED
  • Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

@mergify mergify bot merged commit d5e98ac into aws:master Nov 5, 2021
@mergify
Copy link
Copy Markdown
Contributor

mergify bot commented Nov 5, 2021

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@jogold jogold deleted the rds-rotation-subnets branch November 5, 2021 23:40
iliapolo pushed a commit that referenced this pull request Nov 7, 2021
…et rotation (#17363)

Add options to configure vpc subnet placement and Secrets Manager API
endpoint for the rotation Lambda function.

This is required in some VPC configurations where the database is placed
in subnets without internet connectivity.

Closes #17265


----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
TikiTDO pushed a commit to TikiTDO/aws-cdk that referenced this pull request Feb 21, 2022
…et rotation (aws#17363)

Add options to configure vpc subnet placement and Secrets Manager API
endpoint for the rotation Lambda function.

This is required in some VPC configurations where the database is placed
in subnets without internet connectivity.

Closes aws#17265


----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

@aws-cdk/aws-secretsmanager Related to AWS Secrets Manager

Projects

None yet

Development

Successfully merging this pull request may close these issues.

(rds): secret rotation application times out before rotation completes

4 participants