AWS IAM Identity Center SCIM API Key rotation

Greetings.

I would like to know how we can rotate the SCIM API key, programmatically, every 90 days. As per our current settings, we don't have the right to delete and recreate the API key via the AWS console. I am thinking of using one of the options

Hashicorp Valut AWS Secret Manager with Lambda.

Please help me by throwing your input, based on your experiences. Have a great day, Thanks, and regards Baskaran Viswanathan

主题

安全、身份和合规性

标签

AWS 身份和访问权限管理 AWS IAM 身份中心

语言

English

Baskaran Viswanathan

已提问 5 个月前375 查看次数

1 回答

最新
投票最多
评论最多

这些答案有用吗？为正确答案投票，以帮助社区从您的知识中受益。

Today this is done once a year, and there is no way to automate this to be done every 90 days. Even if you could automate it - SCIM key rotation needs to be done in AWS as well as in the iDP that you are using, so it would not be that straight forward.

You could open a support case, and ask for this to be considered as a feature request.

专家

Max Clements

已回答 4 个月前

专家

Giovanni Lauria

已审核 1 个月前

Baskaran Viswanathan
4 个月前
Thank you so much for your reply. Currently it supports 2 key. But i would like to delete and generate the keys and store/update it in one of the following

Secrets Manager

KMS

AWS Context

Harshicorp Vault Even if it cannot be automatted programmatically, we have to be regenerated manually and then updated the above mentioned services, Correct. Also there is API for the SCIM API access.

Please let me know, if any of my comments make sense, Thank you so much for your help, time and support

Have a great day Thanks and regards Baskaran Viswanathan

AWS IAM Identity Center SCIM API Key rotation

相关内容