Improve Admin API for API keys rotation
Given we have security mandates where we need to rotate API keys for an organization, every 365 days. It would be ideal if when calling
https://www.mongodb.com/docs/atlas/reference/api-resources-spec/v2/#tag/Programmatic-API-Keys/operation/getApiKey
getApiKey from admin api that it should return the created date. This way programmatically we can rotate keys and maintain security posture. As well if there was a way to just refresh the api secret and not generate a new one that would be a plus
Tony
shared this idea
-
Kyle
commented
I agree. I'm not sure why the API key created and lastUsed dates aren't included on the response to the call for all API keys in the org. Those pieces of information are critical to be able to properly audit and track usage of the API keys we have with MongoDB.