How to revoke Systems Manager aws_session_token

Hi there,

Yes, there is a way to revoke the AWS session token remotely in case the edge device gets compromised. You can use the AWS STS API to revoke the session token. The following steps show how to do this:

Go to the AWS Management Console and sign in to your account. Click on the Services tab and select IAM. In the Users section, click on the name of the user whose session token you want to revoke. On the user's details page, scroll down to the Session Credentials section. Click on the Revoke Session Token button. In the confirmation dialog box, click on the Revoke button. The AWS STS API will revoke the session token and the edge device will no longer be able to access AWS resources using that token.

Here is the AWS STS API command to revoke the session token:

aws sts revoke-session-token --session-token <session_token> Replace <session_token> with the actual session token.

You can also use the AWS CLI to revoke the session token. The following command shows how to do this:

aws sts revoke-session-token --session-token <session_token> Replace <session_token> with the actual session token.

Once you have revoked the session token, the edge device will no longer be able to access AWS resources using that token. You can then re-install the edge device and create a new session token.

Follow that Post https://repost.aws/questions/QUWnFu8OxhSNulq-Vu70bAcQ/aws-cli-sts-logout and delete credentials. And other thing you could do is reduce the time off the activation role and maybe in the user that are using that permisión you could disable that capavility with a deny all