ROTATION.

32 production secrets governed by a rotation policy. 12 last rotated more than 180 days ago. 3 rotated only when an engineer noticed they hadn't been.

A secret you didn't rotate is a secret an attacker is hoping you forgot.

SR-018 · prod-db-superuser 420D STALE

Last rotated 2024-09-12. Policy says quarterly.

Rotate this week, automate cadence, alert on lapse.