confluent

Plugin for AWS Lambda to rotate Confluent Cloud API Key

Requirements

Secrets (see the types definition):

• Secret Admin shall be compliant with the type SecretAdmin
• Secret User shall be compliant with the type SecretUser

SecretUser

A map with at least two attributes is expected as the secret to rotate:

• API Key: is expected to be denoted as "user" by default; can be overwritten via env. variable ATTRIBUTE_KEY;
• API Secret: is expected to be denoted as "password" by default; can be overwritten via env. variable ATTRIBUTE_SECRET.

Find details about the Confluent Cloud API keys here .

AWS Lambda Configuration

The environment variable ADMIN_SECRET_ARN must contain the Secret Admin' s ARN.

Optionally, the environment variable DEBUG can be set to "yes", or "true" to activate debug level logs.