AWS re:Postを使用することにより、以下に同意したことになります AWS re:Post 利用規約
AWS re:Postre:Post

AWS IAM Identity Center SCIM API Key rotation

0

Greetings.

I would like to know how we can rotate the SCIM API key, programmatically, every 90 days. As per our current settings, we don't have the right to delete and recreate the API key via the AWS console. I am thinking of using one of the options

Hashicorp Valut AWS Secret Manager with Lambda.

Please help me by throwing your input, based on your experiences. Have a great day, Thanks, and regards Baskaran Viswanathan

トピック
セキュリティ、アイデンティティ、コンプライアンス
タグ
AWS Identity and Access ManagementAWS IAM アイデンティティセンター
言語
English
Baskaran Viswanathan
質問済み 5ヶ月前376ビュー
1回答
0

Today this is done once a year, and there is no way to automate this to be done every 90 days. Even if you could automate it - SCIM key rotation needs to be done in AWS as well as in the iDP that you are using, so it would not be that straight forward.

You could open a support case, and ask for this to be considered as a feature request.

AWS
エキスパート
Max Clements
回答済み 4ヶ月前
profile picture
エキスパート
Giovanni Lauria
レビュー済み 1ヶ月前
  • Baskaran Viswanathan
    4ヶ月前

    Thank you so much for your reply. Currently it supports 2 key. But i would like to delete and generate the keys and store/update it in one of the following

    1. Secrets Manager
    2. KMS
    3. AWS Context
    4. Harshicorp Vault Even if it cannot be automatted programmatically, we have to be regenerated manually and then updated the above mentioned services, Correct. Also there is API for the SCIM API access.

    Please let me know, if any of my comments make sense, Thank you so much for your help, time and support

    Have a great day Thanks and regards Baskaran Viswanathan

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ