Learn how to automate Azure app secret rotation using Pulumi ESC to keep your credentials secure and up to date.

The Pulumi blog provides developers with resources, tutorials, and best practices for infrastructure as code (IaC) and cloud-native development using Pulumi's open-source tools. Developers can learn about deploying and managing infrastructure using familiar programming languages such as JavaScript, TypeScript, Python, and Go. Additionally, the blog covers topics such as cloud architecture patterns, multi-cloud deployments, and serverless computing, enabling developers to build and deploy modern cloud applications with ease.

Pulumi

Pulumi ESC now includes an azure-app-secret rotator that automates client secret rotation for Azure App Registrations (Microsoft Entra ID). The rotator maintains current and previous secrets to ensure zero-downtime rollovers, supports configurable lifetimes up to 730 days, and can be scheduled to run before secrets expire. Setup requires an azure-login environment with appropriate Graph API permissions, and existing credentials can be seeded into the rotator's state object.

Automate Azure App Secret Rotation with ESC