The service now offers managed external secrets that can rotate access keys for Databricks and Twilio, streamlining security for data pipelines and messaging applications.

AWS Secrets Manager now supports automatic credential rotation for Databricks and Twilio integrations, allowing customers to store and manage external secrets without manual key updates.

Managed external secrets simplify security

The new feature introduces managed external secrets, which act as a bridge between Secrets Manager and third‑party services. When a secret is created for Databricks or Twilio, Secrets Manager can generate, store, and rotate the associated access keys on a schedule defined by the user.

Automatic rotation reduces the risk of credential leakage and eliminates the operational overhead of updating keys across pipelines, notebooks, and messaging workflows.

How rotation works for Databricks

For Databricks, Secrets Manager creates a service principal, stores its token, and rotates it according to the configured interval. The updated token is then propagated to the Databricks workspace via the Databricks API, ensuring that notebooks and jobs always use a valid credential.

How rotation works for Twilio

In the Twilio integration, Secrets Manager manages the API key and secret pair. When rotation occurs, a new key is generated, the old key is revoked, and the new credentials are pushed to the Twilio account through Twilio’s REST API, keeping messaging applications continuously authenticated.

  • Define rotation interval (e.g., 30 days)
  • Select target service (Databricks or Twilio)
  • Enable automatic rotation in Secrets Manager

Customers can monitor rotation events through AWS CloudTrail and receive notifications via Amazon EventBridge, providing full auditability of credential changes.

For organizations that already use AWS Secrets Manager for internal secrets, the addition of managed external secrets extends a single, consistent workflow to third‑party services, reinforcing a zero‑trust security posture.

Related coverage: about the feature in the AWS announcement on Secrets Manager managed external secrets.

Explore related coverage in the Infrastructure section of uxc.news for deeper analysis of cloud security trends.

Track coverage on Momentum · More in Infrastructure.