Hello community, @Dino-at-Google @Dino @Anil Sagar @ Google
I would like to implement API key rotation in our organization and want to automate the whole process.
High-level steps -
1. Creating a client app with an API key having limited validity e.g 6 months
2. Generating notifications to app developers and Apigee admins about key expiry about 15/30 days prior to the actual expiry date.
3. Generating a new API key with 6 months validity in the same existing App created in step 1.
I was looking for management APIs to script the above 3 steps and could find only one for step 1 and step 2 (custom script to loop over all apps and credentials to check if expiry falls within the next 30 days).
Can someone please confirm if there are management APIs for the above step 2 and 3?
Appreciate it if you can share any better ideas to implement this API key rotation solution.
Thanks.