aws-secrets-manager-rotation-lambdas
aws-secrets-manager-rotation-lambdas copied to clipboard
Discussion - MultiUser Rotation lambda to rotate secrets only
MultiUser templates are creating cloned users and replicating grants.
Although this is convenient, we have to maintain the different grant methods in the different db engines templates with fair amount of complexity. When complexity deepens, we introduce risks of points of failures.
Since the <db_user> needs to be pre-created with the necessary grants, why not <db_user>_clone?