将 SQL 服务器 sa 密码存储在秘密管理器中

Question

Is there a way to store and setup rotation of sa account password in AWS Secrets Manager when installing SQL Server on EC2?

All I see in Secrets Manager is options to setup database users but not the instance level users unless I create a generic SecureString . I would like to use Password Rotation functionality for sa user's password.

Answer 1

There's nothing special with a Password Rotation functionality that wouldn't work with any kind of secret.

When you're enabling the password rotation, what you do is set up a Lambda function that will do the rotation. In AWS documentation you can find a template for a function that is doing the rotation on the RDS database and you can modify the code for that function to make the update you need. As long as you can make the change for sa programmatically from a Lambda function, you can use the Rotation functionality of a Secrets manager