Prerequisites
Database secrets have been created. If you have not created a database secret, refer to Create Database Secret to create one. Secret rotation has been enabled. If rotation is not enabled for a secret, refer to Database Secret Rotation to enable it. Rotation Implementation Results
SSM updates the username and password information stored in the secret based on the rotation period preset by the user. The client can obtain the latest valid username and password information by calling Obtain Secret Plaintext. The username and password information for the same secret will change, but the corresponding database access permissions remain the same. SSM is responsible for synchronously creating or updating the username or password with the same permissions in the database.
Application and SSM Integration
The application can obtain the latest valid username and password for accessing the database simply by calling Obtain Secret Plaintext. This information can then be used to access the database. Risk Warnings
Risk Points
When SSM performs periodic rotation of database secrets, it updates the account password, causing database access to fail for accounts using expired passwords.
Countermeasures
To prevent database access failures, do not automatically save password information on the client or use third-party SDKs with database connection pooling features. Use the official Tencent Cloud SSM SDK (Go and Python) recommended in Best Practices to connect to the database.