用于轮换密钥的 AWS Secret Manager Lambda 函数

Question

I have created a "other type of secret". I have also added a lambda function as give in this template . Now when I try to rotate immediately its saying "Fail to rotate the secret "TEST_SECRET_ROTATING" A previous rotation isn't complete. That rotation will be reattempted." The rotation time is one day, even next day I see secrete is not updated. I simply added that lambda function. Do I need to define any parameter or any other lambda settings. I also see in documentation that If you enable automatic rotation, the first rotation will happen immediately when you store this secret. But I don`t see this rotation even first time. I also followed this question here . I was able to find version id of AWSPENDING stage, I delete this version ID> click on rotate secret immediately > I see "Secret successfully scheduled for rotation" > but secret us not changed yet, Is there any issue with lambda code now?

Answer 1

其他问题中给出的答案很好，但我必须做一些更改，代码模板没有说我们需要为秘密管理器“SECRETS_MANAGER_ENDPOINT”创建 VPC 端点，我们需要为 lambda 角色授予 KMS 密钥权限，正如约翰所说，我们需要在 lambda 函数中添加 VPC，我还必须在 set_secret、test_secret 和 give pass 中注释“raise NotImplementedError”。