Path: functions/rotate-secrets/*
- The Lambda function connects to the RDS using the current secret.
- Generates a 32 characters random password including ascii_letters, digits and 4. punctuation (excluding “:/@“\’\“) as those are separators characters.
- If connected, rotates the secret in the RDS
- Test new secret before update application SSM parameters
- If Success updates build the DATABASE_URL parameter and RDS Secret.
- Then restart application containers on ECS to refresh secret
