diff --git a/infrastructure/application/index.ts b/infrastructure/application/index.ts
index e668a0858b..3e799daa8d 100644
--- a/infrastructure/application/index.ts
+++ b/infrastructure/application/index.ts
@@ -288,6 +288,7 @@ export = async () => {
     sslPolicy: "ELBSecurityPolicy-TLS-1-2-Ext-2018-06",
     certificateArn: certificates.requireOutput("certificateArn"),
   });
+  // How to rotate this secret: https://github.com/pulumi/pulumi-random/issues/234
   const fileApiKey = new random.RandomPassword("file-api-key", {
     length: 44,
   }).result;