Remove SA Credentials from DB Connection Details on Read (#23256)

builtin/logical/database/path_config_connection.go

@@ -282,6 +282,7 @@ func (b *databaseBackend) connectionReadHandler() framework.OperationFunc {
 
 		delete(config.ConnectionDetails, "password")
 		delete(config.ConnectionDetails, "private_key")
+		delete(config.ConnectionDetails, "service_account_json")
 
 		return &logical.Response{
 			Data: structs.New(config).Map(),

changelog/23256.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/db: Remove the `service_account_json` parameter when reading DB connection details
+```