serviceAccount.rotateKey() - RevoEngine

`serviceAccount.rotateKey()`

Creates a new credential; gracePeriodMs defaults to 0, max 365 days. Omit expireAt to inherit it, pass null for no expiration, or a date at least four hours ahead.

Signature

static rotateKey(ref: ServiceAccountRef, userKeyId: string, input: ServiceAccountKeyRotateInput): Promise<ServiceAccountKeyRotated>;

Example

const key = await serviceAccount.getKey('erp-sync', input.userKeyId);
const { newKey } = await serviceAccount.rotateKey('erp-sync', key.userKeyId, { version: key.version, gracePeriodMs: 60000 });
await vault.rotate('ERP_API_KEY', { value: newKey.secret });

See all serviceAccount methods or runtime basics.

Last modified on November 8, 2026