En utilisant AWS re:Post, vous acceptez les AWS re:Post Conditions d’utilisation
AWS re:Postre:Post

AWS IAM Identity Center SCIM API Key rotation

0

Greetings.

I would like to know how we can rotate the SCIM API key, programmatically, every 90 days. As per our current settings, we don't have the right to delete and recreate the API key via the AWS console. I am thinking of using one of the options

Hashicorp Valut AWS Secret Manager with Lambda.

Please help me by throwing your input, based on your experiences. Have a great day, Thanks, and regards Baskaran Viswanathan

Sujets
Sécurité, identité et conformité
Balises
Gestion des identités et des accès AWSCentre d’identité IAM AWS
Langue
English
Baskaran Viswanathan
demandé il y a 5 mois375 vues
1 réponse
0

Today this is done once a year, and there is no way to automate this to be done every 90 days. Even if you could automate it - SCIM key rotation needs to be done in AWS as well as in the iDP that you are using, so it would not be that straight forward.

You could open a support case, and ask for this to be considered as a feature request.

AWS
EXPERT
Max Clements
répondu il y a 4 mois
profile picture
EXPERT
Giovanni Lauria
vérifié il y a un mois
  • Baskaran Viswanathan
    il y a 4 mois

    Thank you so much for your reply. Currently it supports 2 key. But i would like to delete and generate the keys and store/update it in one of the following

    1. Secrets Manager
    2. KMS
    3. AWS Context
    4. Harshicorp Vault Even if it cannot be automatted programmatically, we have to be regenerated manually and then updated the above mentioned services, Correct. Also there is API for the SCIM API access.

    Please let me know, if any of my comments make sense, Thank you so much for your help, time and support

    Have a great day Thanks and regards Baskaran Viswanathan

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions

Contenus pertinents