Rotation connectors

Some rotators need to reach the credential they’re rotating — for example, the mysql and postgres rotators must connect to the database to change a user’s password. When the target lives in a private network that Pulumi Cloud can’t reach directly, a rotation connector runs the rotation inside that network on Pulumi Cloud’s behalf.

For background on what rotation is and how the fn::rotate::* syntax works, see Rotation.

Available connectors

Setup checklists

• Database user setup — pre-create the database user (and grant the right permissions) that a rotator will manage.