Closed morisekntr closed 1 month ago
Voting for Prioritization
Volunteering to Work on This Issue
Hi @morisekntr 👋!
Fellow DevOps engineer here, I understand your use case.
Unfortunately this is not something the AWS provider for Terraform can help you with, as the provider is just using the APIs of AWS, and they don't offer the functionality to stop the rotation.
At the same time it is a best practice to have a specific user for your application, instead of using the root user directly. In your case I'd look into that and how to solve that instead of expecting the functionality from the AWS provider.
With the above in mind, and that it looks like there's already an existing issue tracking this request (#33462), I'm going to close this issue. If you have any additional requests in the future, please do reach out and let us know!
[!WARNING] This issue has been closed, meaning that any additional comments are hard for our team to see. Please assume that the maintainers will not see them.
Ongoing conversations amongst community members are welcome, however, the issue will be locked after 30 days. Moving conversations to another venue, such as the AWS Provider forum, is recommended. If you have additional concerns, please open a new issue, referencing this one where needed.
I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.
Description
Hello,
I have learned that when creating RDS instances with Terraform and enabling manage_master_user_password, the master password is automatically managed by Secret Manager without being stored in the tfstate file.
However, the password in Secret Manager has its rotation schedule automatically enabled. This automatic rotation schedule is critical for us, as we handle a PHP-based monolithic web application, and we would prefer to have it disabled by default.
Thank you for your consideration.
Affected Resource(s) and/or Data Source(s)
Potential Terraform Configuration
OR