#secrets-backend

Airflow Session and Secret Revocation Limits

When enforcing least privilege in Airflow, we need active web sessions and worker-resolved secrets to reflect credential changes promptly—for example, after rotating a connection password in an external secrets backend or disabling a user account. The goal is to understand the documented boundaries of this behavior so we can decide whether Airflow alone can