Ao usar o AWS re:Post, você concorda com os AWS re:Post Termos de uso
AWS re:Postre:Post

AWS IAM Identity Center SCIM API Key rotation

0

Greetings.

I would like to know how we can rotate the SCIM API key, programmatically, every 90 days. As per our current settings, we don't have the right to delete and recreate the API key via the AWS console. I am thinking of using one of the options

Hashicorp Valut AWS Secret Manager with Lambda.

Please help me by throwing your input, based on your experiences. Have a great day, Thanks, and regards Baskaran Viswanathan

Tópicos
Segurança, identidade e conformidade
Tags
AWS Identity and Access ManagementCentro de identidade do AWS IAM
Idioma
English
Baskaran Viswanathan
feita há 5 meses376 visualizações
1 Resposta
0

Today this is done once a year, and there is no way to automate this to be done every 90 days. Even if you could automate it - SCIM key rotation needs to be done in AWS as well as in the iDP that you are using, so it would not be that straight forward.

You could open a support case, and ask for this to be considered as a feature request.

AWS
ESPECIALISTA
Max Clements
respondido há 4 meses
profile picture
ESPECIALISTA
Giovanni Lauria
avaliado há um mês
  • Baskaran Viswanathan
    há 4 meses

    Thank you so much for your reply. Currently it supports 2 key. But i would like to delete and generate the keys and store/update it in one of the following

    1. Secrets Manager
    2. KMS
    3. AWS Context
    4. Harshicorp Vault Even if it cannot be automatted programmatically, we have to be regenerated manually and then updated the above mentioned services, Correct. Also there is API for the SCIM API access.

    Please let me know, if any of my comments make sense, Thank you so much for your help, time and support

    Have a great day Thanks and regards Baskaran Viswanathan

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas

Conteúdo relevante