Azure Cosmos DB Safe Key Rotation Is Now Generally Available

Rotating account keys on a live database has always carried a quiet risk: retire the wrong key and an application you forgot about starts failing. Azure Cosmos DB Safe Key Rotation is now generally available, and it targets exactly that problem.

The feature exposes timestamp metadata showing when each account key was last used. That lets you see which keys are still active before you rotate or retire credentials, so you can find the clients still depending on an old key instead of guessing.

If you manage Cosmos DB accounts and have a key rotation policy to enforce, this is worth a look. Dive into the full technical breakdown here