Bringing together the Apache Cassandra experts from the community and DataStax.

Want to learn? Have a question? Want to share your expertise? You are in the right place!

Not sure where to begin? Getting Started

 

question

praveenkg avatar image
praveenkg asked Erick Ramirez answered

Should we rotate the Astra DB secure bundle every year?

WE are planning to use AstraDB for our project. To connect AstraDB from java application, we are using secure-connect-<database>.zip. My understanding it internally uses certificate to connect AstraDB secularly. If so, do we need to rotate the zip file every year as certificate basically will have expiry date.

astra db
10 |1000

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

smadhavan avatar image
smadhavan answered smadhavan edited

@praveenkg, good question! As of this writing, it comes with a 10-year validity. We don't need to rotate the Secure Connect Bundle (SCB), but instead, you could consider rotating [as frequently as you need] the application tokens. In your Java application, you will be using the ClientID, ClientSecret along with the SCB to interact with the AstraDB cluster.

You could refer to this documentation on how to manage application tokens. I hope this helps!

Share
10 |1000

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Erick Ramirez avatar image
Erick Ramirez answered

The certificate included in your secure connect bundle is valid for 10 years from the time that you've created your Astra database so there is no requirement to rotate it every year.

As a side note, we recommend that you delete local copies of your bundle since it contains credentials and connection details to your database. If you are granting access to someone in your organisation, you can download a new copy of the secure bundle from the Astra dashboard so it is not necessary to keep a local copy. Cheers!

Share
10 |1000

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.