
Automate Active Directory service account password rotation by synchronizing credentials between AWS Secrets Manager and Microsoft AD using AWS Systems Manager every 30 days.


<div><p>This article explains how to automate Active Directory credential rotation for AWS Secrets Manager using AWS Systems Manager.</p><ul><li>Uses SSM Automation to synchronize AD service account passwords with AWS Secrets Manager</li><li>Windows EC2 instance with AD tools runs scheduled rotation every 30 days</li><li>Generates complex random passwords (64-128 characters) and updates both AD and Secrets Manager</li><li>Includes rollback capability if either update fails</li><li>Provides CloudFormation templates for prerequisites and solution deployment</li><li>Estimated monthly cost approximately $50 USD in US West Oregon region</li><li>Applicable to RDS for SQL Server self-managed AD deployments</li></ul><p>This solution automates secure credential rotation between Active Directory and AWS Secrets Manager, eliminating manual password management for service accounts.</p></div>


Related articles