Struct KeyRotationManager 

pub struct KeyRotationManager { /* private fields */ }

Manages automatic key rotation for encryption keys.

Implementations

impl KeyRotationManager

pub fn new(store: Arc<dyn SecretStore>, key_prefix: impl Into<String>) -> Self

Create a new key rotation manager.

pub fn with_rotation_interval(self, interval: Duration) -> Self

Set the rotation interval.

pub async fn get_current_key(&self) -> SecretResult<SecretValue>

Get the current encryption key.

pub async fn get_key_version(&self, version: u64) -> SecretResult<SecretValue>

Get a specific key version.

pub fn needs_rotation(&self) -> bool

Check if rotation is needed.

pub fn rotate(&self)

Rotate to a new key version.

Note: The actual key must be pre-provisioned in the secret store.

pub fn current_version(&self) -> u64

Get the current key version number.