The service can disable an individual secret version so that its value can no longer be retrieved, while retaining the version so that it may be re-enabled or destroyed later. Providers without a disable state revoke a version by removing its staging labels, after which the service deletes it without a recovery window.
Secret Version Disabling
CCC.SecMgmt.CP10
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.SecMgmt.TH04 | Secret Versions are Disabled While Systems Still Depend on Them | A secret version may be disabled, so that it still exists but its value can no longer be read, or scheduled for destruction while external systems still depend on it, and a destroyed version cannot be recovered once its recovery window elapses. Retrieval requests then fail or return no current version, and the credential material is lost if no other copy exists. The availability of every system that depends on the secret is affected. |