By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

AWS IAM Identity Center SCIM API Key rotation

0

Greetings.

I would like to know how we can rotate the SCIM API key, programmatically, every 90 days. As per our current settings, we don't have the right to delete and recreate the API key via the AWS console. I am thinking of using one of the options

Hashicorp Valut AWS Secret Manager with Lambda.

Please help me by throwing your input, based on your experiences. Have a great day, Thanks, and regards Baskaran Viswanathan

Topics
Security, Identity, & Compliance
Tags
AWS Identity and Access ManagementAWS IAM Identity Center
Language
English
Baskaran Viswanathan
asked 4 months ago361 views
1 Answer
0

Today this is done once a year, and there is no way to automate this to be done every 90 days. Even if you could automate it - SCIM key rotation needs to be done in AWS as well as in the iDP that you are using, so it would not be that straight forward.

You could open a support case, and ask for this to be considered as a feature request.

AWS
EXPERT
Max Clements
answered 4 months ago
profile picture
EXPERT
Giovanni Lauria
reviewed 25 days ago
  • Baskaran Viswanathan
    4 months ago

    Thank you so much for your reply. Currently it supports 2 key. But i would like to delete and generate the keys and store/update it in one of the following

    1. Secrets Manager
    2. KMS
    3. AWS Context
    4. Harshicorp Vault Even if it cannot be automatted programmatically, we have to be regenerated manually and then updated the above mentioned services, Correct. Also there is API for the SCIM API access.

    Please let me know, if any of my comments make sense, Thank you so much for your help, time and support

    Have a great day Thanks and regards Baskaran Viswanathan

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content