A Vault lease is revoked by referencing the lease ID. When Vault returns a dynamic secret, such as database credentials, it includes a lease_id. That lease ID is the handle used by lease management commands, including vault lease renew and vault lease revoke. A Secret ID is associated with AppRole authentication and is not the identifier used to revoke a dynamic secret lease. A user ID is not used for lease revocation. A token ID may be used for token operations, but Vault leases for dynamic secrets are managed through lease-specific commands and lease IDs. The exam point is direct: if the task is to revoke leased dynamic credentials, the operator needs the lease ID returned with those credentials. HashiCorp’s lease documentation states that clients use the lease ID to renew or revoke a secret.
================
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit