OVERLAP_DURATIONdefaults toP1Dand is rejected if it exceedsP1D.
- Added outbound HTTP logging for rotation calls and enforced mixed-character random password generation.
- Removed default values for
ClientSecretKeyandClientIdKey
- Upgrade Lambda runtime to Python 3.14
- Correct Bad Replication into us-east-1
- Allow Client-Specified Names of Keys in the Secret Body
- Correct Name of Environment Variable
- Allow Client-Specified Secret Overlap Duration
- Correct Serialization of DateTime Values
- Correct Client Registry Address
- BREAKING: The Auth0 Façade has been supplanted by the Client Registry.
- AUTHORITY has been renamed to ISSUER, accordingly.
- An error related to exception handling has been corrected.
- The JSON structure of the generated secret has been improved.
- The permission to allow Secrets Manager to invoke the rotation Lambda have been moved into the application.
- This requires a new capability acknowledgement:
CAPABILITY_RESOURCE_POLICY.
- This requires a new capability acknowledgement:
- The rotator can rotate secrets encrypted by a customer-managed KMS key.
- The runtime has been updated to
python3.8.
- A slight performance improvement related to the eager creation of an AWS service client.
- Everything is new!