This document guides you on how to delete database credentials that no longer require hosting in SSM. To prevent service interruption caused by accidental deletion, SSM adopts a scheduled deletion mechanism: deletion operations do not take effect immediately but enter a scheduled deletion period, after which the system automatically performs permanent deletion.
Attention:
Deleting a credential only stops SSM from hosting and rotating the password for the database account. It does not delete the account in the database instance.
Credentials in the pending deletion state cannot be read or used. Before deletion, confirm that the relevant applications have completed credential migration.
Credential data and rotation configuration cannot be recovered after permanent deletion. Proceed with caution.
Scheduling Secret Deletion
Note:
If the credential is enabled, click Disable to disable it.
1. Log in to the SSM console, and click Database Credential in the left sidebar. 2. On the Database Secrets list page, select the region where your secrets are located in the upper-left corner.
3. In the secrets list, locate the target credential you want to delete, and click More > Schedule deletion in the Operations column.
4. In the dialog box that appears, configure the following parameters:
|
Scheduled Deletion Date | The effective time for permanent deletion of a credential. You can set a retention period of 0 - 30 days. If you select "0" days, the credential will be deleted immediately. During the scheduled deletion period, the credential status is changed to "Scheduled for Deletion" and can still be restored. |
5. After confirming the information is correct, click Yes.
6. In the secrets list, the status column for that credential will display "Pending Deletion" and show the scheduled deletion date.
Restoring a Scheduled Secret Deletion
Before the scheduled deletion period expires, you can cancel the deletion plan and restore the credential to its normal usable state.
1. In the Database Secrets list, locate the target credential whose status is pending deletion.
2. Click Cancel deletion in the Operations column.
3. In the confirmation dialog box that appears, click OK.
4. After the recovery is successful, you must manually change the credential status to "Enabled". Only after it is enabled can the application obtain the credential content normally through the SDK.