Self-service API key rotation
We have moved the API keys to a new home under Integrations > API Keys to support a major improvement in how you manage your environment credentials: Self-service Key Rotation.
🆕 What’s New
- Self-Service Rotation: You can now rotate your API keys directly from the dashboard. If you need to refresh your credentials for compliance or security reasons, you can now generate a new secret and invalidate the old one instantly, without contacting support.
- Programmatic Rotation: We have exposed the rotation capabilities via our API. This allows you to automate key rotation as part of your CI/CD pipelines or security protocols.
- New Location: To support these changes, API keys have moved from general Account Settings to Integrations > API Keys inside each environment.
⭐️ Why It Matters
- Security Best Practices: Regular key rotation is a critical security measure. You now have the tools to adhere to strict compliance policies independently.
- Instant Remediation: If you ever suspect a key has been compromised, you can roll it over immediately to secure your environment.
🛠 Get Started
To access your keys, navigate to the Integrations section in the sidebar and select API Keys.
New Location: Integrations > API Keys
To learn more about rotating your keys via the UI or API, check out our documentation.
🍿 See it in action
🔮 What’s Next
We are currently working on Scoped Keys. This will allow you to generate additional keys with specific permissions (e.g., read-only access for subscriptions) to further tighten your security posture.