Skip to content

Latest commit

 

History

History
17 lines (13 loc) · 1.16 KB

README.md

File metadata and controls

17 lines (13 loc) · 1.16 KB
Raw

Operations Support Scripts

Tools for performing maintenance operations that are not yet automated.

Rotate pgstac password

This cli script will rotate the postgres connection password in a specified AWS SecretsManager Secret, update the corresponding role in the postgres database, and trigger all services that depend on postgres connections to retrieve the updated secret.

Usage

support_scripts/rotate_pgstac_password.py -h

Required input parameters

To use the script, the following AWS resource names are required

  • --admin the AWS secret containing the admin postgres connection info. This role will be used to update a pgstac user role. This secret will have a description Generated by the CDK for stack: veda-backend-<stage>
  • --pgstac the aws secret containing the pgstac user role to be updated. This secret will have a description Pgstac database bootsrapped by veda-backend-<stage> stack
  • --stac and --raster the resource names of the STAC and Raster lambdas that are using the pgstac connection secret.

Optional dry run

This this tool has a dry run mode that will not alter the database role or AWS secrets --dry.