The service may be configured with a rotation schedule for a secret; when rotation is due it invokes a user-defined rotation function or publishes a notification so that an external system rotates the value. Providers that only notify leave the stale credential valid until an external system completes the rotation.
Scheduled Secret Rotation
CCC.SecMgmt.CP07
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.SecMgmt.TH03 | Secrets are Not Rotated or Rotation Fails | A rotation schedule may be absent, the rotation function may fail before it stores the new value as a new secret version, or a rotation-due notification may go unanswered where the provider only notifies an external system. A credential then remains valid for an unbounded period, so a compromise that is never detected keeps granting access, while a partially completed rotation can leave external systems holding a credential that the target no longer accepts. Confidentiality of the protected systems and availability of their consumers are affected. |