The service can update the value or metadata of an existing secret after creation, and automatically stores an updated value as a new version of that secret.
Update Secrets
CCC.SecMgmt.CP05
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.SecMgmt.TH02 | Secret Values are Replaced by Unauthorized Entities | Write permission on a secret may be granted more broadly than read permission, or may be obtained through a compromised identity, allowing a new version to be stored with a value chosen by the writer. External systems that consume the secret then authenticate with the substituted credential or connect to an endpoint named in it, redirecting data to an unintended destination or failing to authenticate. The integrity of the credential and the availability of the systems that depend on it are affected. |