AWS Secrets Manager adds managed external secrets support for Jenkins and SonarQube

AWS Secrets Manager Updates

AWS Secrets Manager now supports Jenkins API Tokens and SonarQube Tokens, allowing automatic rotation of these credentials directly from the AWS console.

Jenkins

• Self-rotation: The token being rotated authenticates its own replacement.
• Admin-assisted rotation: A separate admin token performs the generate and revoke operations.

SonarQube

• User Tokens: Support self-rotation.
• Analysis Tokens: Rotated using an admin token.

What to do

• Enable Jenkins and SonarQube token rotation in AWS Secrets Manager.
• Configure rotation for your tokens.
• Monitor the rotation process for any interruptions.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.