Is your request related to a new offering from AWS?
Is your request related to a problem? Please describe.
There's no management on how the policy for the master DB secret is provisioned when using manage_master_user_password. We have provisioned the password with this option but we weren't aware that it was being rotated until a week later, as we are still getting our internal process & provisioning of the DB with our team in order. It's great that it was setup to be rotated but wasn't obvious when using the module.
Describe the solution you'd like.
Since the provider has a solution:
resource/aws_secretsmanager_secret_rotation: The rotation_lambda_arn argument is now optional to support modifying the rotation schedule of AWS-managed secrets. (https://github.com/hashicorp/terraform-provider-aws/issues/34180)
It would be great to set the rotation length within the module to be something other than 7 days (or to turn it off... but that's not the best of ideas...)
Describe alternatives you've considered.
Since the rotation is not managed by terraform but RDS does use it, it's just inconsistent to having an additional step to turn off the sync or to set it. It's not a ground breaking issue but since it is the essentially the master password, management on how it's rotating or to have the option to turn it off
Additional context
Is your request related to a new offering from AWS?
Is your request related to a problem? Please describe.
There's no management on how the policy for the master DB secret is provisioned when using manage_master_user_password. We have provisioned the password with this option but we weren't aware that it was being rotated until a week later, as we are still getting our internal process & provisioning of the DB with our team in order. It's great that it was setup to be rotated but wasn't obvious when using the module.
Describe the solution you'd like.
Since the provider has a solution:
resource/aws_secretsmanager_secret_rotation: The rotation_lambda_arn argument is now optional to support modifying the rotation schedule of AWS-managed secrets. (https://github.com/hashicorp/terraform-provider-aws/issues/34180)It would be great to set the rotation length within the module to be something other than 7 days (or to turn it off... but that's not the best of ideas...)
Describe alternatives you've considered.
Since the rotation is not managed by terraform but RDS does use it, it's just inconsistent to having an additional step to turn off the sync or to set it. It's not a ground breaking issue but since it is the essentially the master password, management on how it's rotating or to have the option to turn it off
Additional context