{"action":"created","issue":{"url":"https://api.github.com/repos/awsdocs/aws-secrets-manager-docs/issues/5","repository_url":"https://api.github.com/repos/awsdocs/aws-secrets-manager-docs","labels_url":"https://api.github.com/repos/awsdocs/aws-secrets-manager-docs/issues/5/labels{/name}","comments_url":"https://api.github.com/repos/awsdocs/aws-secrets-manager-docs/issues/5/comments","events_url":"https://api.github.com/repos/awsdocs/aws-secrets-manager-docs/issues/5/events","html_url":"https://github.com/awsdocs/aws-secrets-manager-docs/issues/5","id":323306057,"node_id":"MDU6SXNzdWUzMjMzMDYwNTc=","number":5,"title":"Help Wanted - Troubleshooting Tips, Tricks, and Strategies","user":{"login":"bisdavid","id":9559235,"node_id":"MDQ6VXNlcjk1NTkyMzU=","avatar_url":"https://avatars1.githubusercontent.com/u/9559235?v=4","gravatar_id":"","url":"https://api.github.com/users/bisdavid","html_url":"https://github.com/bisdavid","followers_url":"https://api.github.com/users/bisdavid/followers","following_url":"https://api.github.com/users/bisdavid/following{/other_user}","gists_url":"https://api.github.com/users/bisdavid/gists{/gist_id}","starred_url":"https://api.github.com/users/bisdavid/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bisdavid/subscriptions","organizations_url":"https://api.github.com/users/bisdavid/orgs","repos_url":"https://api.github.com/users/bisdavid/repos","events_url":"https://api.github.com/users/bisdavid/events{/privacy}","received_events_url":"https://api.github.com/users/bisdavid/received_events","type":"User","site_admin":false},"labels":[{"id":1041893257,"node_id":"MDU6TGFiZWwxMDQxODkzMjU3","url":"https://api.github.com/repos/awsdocs/aws-secrets-manager-docs/labels/Hacktoberfest","name":"Hacktoberfest","color":"ffe0c1","default":false},{"id":752626951,"node_id":"MDU6TGFiZWw3NTI2MjY5NTE=","url":"https://api.github.com/repos/awsdocs/aws-secrets-manager-docs/labels/enhancement","name":"enhancement","color":"84b6eb","default":true},{"id":752626952,"node_id":"MDU6TGFiZWw3NTI2MjY5NTI=","url":"https://api.github.com/repos/awsdocs/aws-secrets-manager-docs/labels/help%20wanted","name":"help wanted","color":"33aa3f","default":true},{"id":752626955,"node_id":"MDU6TGFiZWw3NTI2MjY5NTU=","url":"https://api.github.com/repos/awsdocs/aws-secrets-manager-docs/labels/question","name":"question","color":"cc317c","default":true}],"state":"open","locked":false,"assignee":{"login":"bisdavid","id":9559235,"node_id":"MDQ6VXNlcjk1NTkyMzU=","avatar_url":"https://avatars1.githubusercontent.com/u/9559235?v=4","gravatar_id":"","url":"https://api.github.com/users/bisdavid","html_url":"https://github.com/bisdavid","followers_url":"https://api.github.com/users/bisdavid/followers","following_url":"https://api.github.com/users/bisdavid/following{/other_user}","gists_url":"https://api.github.com/users/bisdavid/gists{/gist_id}","starred_url":"https://api.github.com/users/bisdavid/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bisdavid/subscriptions","organizations_url":"https://api.github.com/users/bisdavid/orgs","repos_url":"https://api.github.com/users/bisdavid/repos","events_url":"https://api.github.com/users/bisdavid/events{/privacy}","received_events_url":"https://api.github.com/users/bisdavid/received_events","type":"User","site_admin":false},"assignees":[{"login":"bisdavid","id":9559235,"node_id":"MDQ6VXNlcjk1NTkyMzU=","avatar_url":"https://avatars1.githubusercontent.com/u/9559235?v=4","gravatar_id":"","url":"https://api.github.com/users/bisdavid","html_url":"https://github.com/bisdavid","followers_url":"https://api.github.com/users/bisdavid/followers","following_url":"https://api.github.com/users/bisdavid/following{/other_user}","gists_url":"https://api.github.com/users/bisdavid/gists{/gist_id}","starred_url":"https://api.github.com/users/bisdavid/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bisdavid/subscriptions","organizations_url":"https://api.github.com/users/bisdavid/orgs","repos_url":"https://api.github.com/users/bisdavid/repos","events_url":"https://api.github.com/users/bisdavid/events{/privacy}","received_events_url":"https://api.github.com/users/bisdavid/received_events","type":"User","site_admin":false}],"milestone":null,"comments":9,"created_at":"2018-05-15T17:08:03Z","updated_at":"2018-10-09T19:03:04Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"As you know, troubleshooting an asynchronous process like a rotation Lambda with its many moving parts can be a challenge.  What issues have you run into getting your rotation Lambdas to work? Can you share your solutions with your colleagues?  Please share only problems for which you've found a solution. If you're still struggling with a problem please contact Customer Support or [post your issue on the Forums.](https://forums.aws.amazon.com/forum.jspa?forumID=296)\r\n\r\nShare the following information with me as a response to this issue, and I'll consider adding it to the [troubleshooting section of the AWS Secrets Manager documentation](https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html).\r\n\r\n1. What were the symptoms of the problem?\r\n2. Were the exception/error messages helpful or less than helpful?  Did they help lead you to the solution, confuse you, or were they just white noise that didn't help or hurt?  What specific message(s) did you get and how did they help or not help?\r\n3. What did you do to troubleshoot?  What did you try that didn't help?  What finally did lead you to the correct root cause?\r\n4. What did you finally do to correct the problem?\r\n\r\nI'll use this information to improve the documentation - specifically the troubleshooting sections and descriptions of the exception messages.  I'll also pass it relevant details on to the engineering team to possibly improve the error messages or the product itself.  The more detail you can add, the better I can use it to improve things!  Thank you very much, especially on behalf of all of your colleagues who run into the same problems!\r\n\r\nDave Bishop\r\nSenior Technical Writer\r\nAWS Secrets Manager\r\nhttps://docs.aws.amazon.com/secretsmanager/latest/userguide/"},"comment":{"url":"https://api.github.com/repos/awsdocs/aws-secrets-manager-docs/issues/comments/428311911","html_url":"https://github.com/awsdocs/aws-secrets-manager-docs/issues/5#issuecomment-428311911","issue_url":"https://api.github.com/repos/awsdocs/aws-secrets-manager-docs/issues/5","id":428311911,"node_id":"MDEyOklzc3VlQ29tbWVudDQyODMxMTkxMQ==","user":{"login":"josh-demuth","id":7624839,"node_id":"MDQ6VXNlcjc2MjQ4Mzk=","avatar_url":"https://avatars3.githubusercontent.com/u/7624839?v=4","gravatar_id":"","url":"https://api.github.com/users/josh-demuth","html_url":"https://github.com/josh-demuth","followers_url":"https://api.github.com/users/josh-demuth/followers","following_url":"https://api.github.com/users/josh-demuth/following{/other_user}","gists_url":"https://api.github.com/users/josh-demuth/gists{/gist_id}","starred_url":"https://api.github.com/users/josh-demuth/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/josh-demuth/subscriptions","organizations_url":"https://api.github.com/users/josh-demuth/orgs","repos_url":"https://api.github.com/users/josh-demuth/repos","events_url":"https://api.github.com/users/josh-demuth/events{/privacy}","received_events_url":"https://api.github.com/users/josh-demuth/received_events","type":"User","site_admin":false},"created_at":"2018-10-09T19:03:04Z","updated_at":"2018-10-09T19:03:04Z","author_association":"NONE","body":"hi @dianeo - apologies for the delay. due to requirements from our security team we are rotating our api keys on a scheduled basis. as to 'why' we are doing this it is to ensure that if our keys get compromised they won't be for long. secrets manager is a perfect service for us since it handles the 4 steps of the rotation process and allows us to focus on actually rotating the keys instead of orchestrating the rotation process.\r\n\r\nthe way we are getting around the propagation delay is to sleep during our 'test' step. we just have a simple loop that tries to call our api with the new key. it will loop for X seconds and keep trying until successful. we've seen that sleeping for < 10 seconds works 98% of the time but sometimes it would have been better to sleep about 20 seconds.\r\n\r\nsince we are using our main API URL it is pretty much impossible as-is to tell that the 403 errors we are receiving when it loops and fails is from the rotation process vs. from an actual request. this has triggered our CloudWatch alarms a few times. Other than that, the process seems to be working great."}}
{"actor":{"display_login":"josh-demuth"}}