February 2025: Implemented configurable AWS Secrets Manager deletion policy in the Harness Terraform provider, enabling recovery duration customization and force deletion without recovery for Secrets Manager connectors. This work enhances data retention policy granularity and reduces risk from inadvertent deletions, aligning Terraform workflows with governance requirements across the Harness platform.

In January 2025, Harness Go SDK delivered a targeted enhancement for AWS Secrets Manager integration within harness-go-sdk, introducing configurable deletion behavior to strengthen secret lifecycle governance. The work adds new configuration fields to specify recovery duration and the option to force deletion without recovery, along with updated documentation. Implemented via Terraform changes and linked to the PL-58650 initiative (commit referenced below), this feature improves control over secret deletion while reducing the risk of accidental data loss.

December 2024 monthly summary for harness/terraform-provider-harness. Key outcomes centered on reliability improvements for connectors and expanded secret management capabilities. Delivered two major items with clear business value and measurable impact: 1) Azure Key Vault delegate selector handling in the Terraform provider was fixed to ensure proper propagation of selector configuration and to simplify related logic, increasing reliability of deployments that rely on Azure Key Vault connectors. 2) AWS Secret Manager gained a new option to use putSecretValue for updates, providing finer-grained control over secret updates and aligning with customer workflows. In addition, documentation, schema changes, and comprehensive tests were updated to support these changes, reducing risk for downstream users.

Month: 2024-11. Focused development on the AWS Secret Manager integration within harness-go-sdk. Delivered a feature that adds the UsePutSecret flag to control the put-secret operation during updates, enabling finer control over secret management behavior. Updated Go SDK type definitions and accompanying documentation to reflect the new flag. All work traceable to commit 8a2d4c2dae243d21f666af1b668abc3eea23179f (feat: PL-58653).