AWS
Key & Secret Rotation
KMS keys and Secrets Manager secrets with rotation state: off, overdue or actively rotating.
Live preview — demo data
Same idea on another cloud
What this pane shows
Two stacked tables: customer-managed KMS keys (with rotation enabled / disabled / not applicable for asymmetric keys) and Secrets Manager secrets (with rotation Lambda, last-rotated date, and overdue flag if past their rotation interval). A top scorecard counts the three states.
Key use cases
- Identify production secrets that have never been rotated.
- Catch a rotation Lambda that's been failing silently for weeks.
- Audit customer-managed-key rotation coverage for compliance.
- Plan rotation work after a credential exposure incident.
How to embed
lp.js is the single-entry loader: it injects the shared LightPane runtime
(and sd-embed.css) once per page. Add this pane's own stylesheet and script;
the pane mounts itself wherever the matching <div> is in the DOM.
<!-- In <head> — this pane's stylesheet -->
<link rel="stylesheet" href="https://lightpane.io/_pane-tests/aws/kms-rotation/kms-rotation.css">
<!-- Your access key (inline, or set window.lpEmbed.accessKey from your own JS) -->
<script>window.lpEmbed = { accessKey: "<your-access-key>" };</script>
<!-- Where the pane should appear -->
<div class="lp-kms-rotation-panel" data-lp-account="<your-account-alias>"></div>
<!-- Before </body> — shared loader + this pane's script -->
<script src="https://lightpane.io/embed/lp.js"></script>
<script src="https://lightpane.io/_pane-tests/aws/kms-rotation/kms-rotation.js" defer></script>
Tier
Available on Explorer and above.
Build notes
Mock-only at the moment — live-wiring tracked in the roadmap.