II.
SkillArea overview
Reference · liveskill-area:secrets-rotation
Secrets Rotation overview
Automated rotation of credentials, certificates, and tokens — short-lived secrets, KMS-backed envelopes, and zero-downtime rollover.
Attributes
displayName
Secrets Rotation
description
Automated rotation of credentials, certificates, and tokens —
short-lived secrets, KMS-backed envelopes, and zero-downtime
rollover.
domains
expertiseLevels
- intermediate
- expert
Outgoing edges
applies_to1
- specialization:devops-sre-platform·Specialization
uses_stack_part1
- stack-part:secrets-manager·StackPartSecrets Manager
uses_tool1
- tool:sops·ToolSOPS
Incoming edges
lib_requires_skill_area4
- lib-process:devops-sre-platform--secrets-management·LibraryProcessspecializations/devops-sre-platform/secrets-management
- lib-skill:devops-sre-platform--secrets-management·LibrarySkillsecrets-management
- lib-skill:sdk-platform-development--api-key-manager·LibrarySkillapi-key-manager
- lib-skill:security-compliance--key-management-orchestrator·LibrarySkillkey-management-orchestrator
prerequisite_for_learning2
- skill-area:ci-security·SkillAreaCI/CD Security
- skill-area:key-rotation·SkillAreaKey Rotation
requires_expertise1
- responsibility:secret-rotation-cadence·ResponsibilitySecret rotation cadence
requires_skill_area15
- stack-profile:terraform-landing-zone·StackProfileTerraform Landing Zone (Terraform, HCL, Vault, Go, OPA)
- stack-profile:secrets-management·StackProfileSecrets Management (Vault, Kubernetes, Terraform, Docker, Go)
- stack-profile:compliance-audit-trail·StackProfileCompliance & Audit Trail (Go, PostgreSQL, RabbitMQ, Vault, Elasticsearch, Prometheus)
- stack-profile:hybrid-cloud-onprem·StackProfileHybrid Cloud — On-Prem + Cloud (Kubernetes, Terraform, Vault, Prometheus, ArgoCD, Helm)
- workflow:sox-controls-review·WorkflowSOX Controls Review
- workflow:soc2-audit-preparation·WorkflowSOC 2 Audit Preparation
- workflow:key-ceremony·WorkflowKey Ceremony
- workflow:cryptographic-library-upgrade·WorkflowCryptographic Library Upgrade
- workflow:certificate-rotation·WorkflowCertificate Rotation
- workflow:pos-system-upgrade·WorkflowPOS System Upgrade
- workflow:hipaa-compliance-audit·WorkflowHIPAA Compliance Audit
- workflow:vulnerability-management·WorkflowVulnerability Management Workflow
- workflow:secret-rotation·WorkflowSecret Rotation
- workflow:vulnerability-management·WorkflowVulnerability Management Workflow
- workflow:secret-rotation·WorkflowSecret Rotation
stack_part_used_by1
- stack-part:secrets-manager·StackPartSecrets Manager
tool_used_by2
- tool:sops·ToolSOPS
- tool:vault·ToolHashiCorp Vault