AWS IAM Identity Center SCIM API Key rotation

Greetings.

I would like to know how we can rotate the SCIM API key, programmatically, every 90 days. As per our current settings, we don't have the right to delete and recreate the API key via the AWS console. I am thinking of using one of the options

Hashicorp Valut AWS Secret Manager with Lambda.

Please help me by throwing your input, based on your experiences. Have a great day, Thanks, and regards Baskaran Viswanathan

主題

安全性、身分識別與合規

標籤

AWS Identity and Access Management AWS IAM Identity Center

語言

English

Baskaran Viswanathan

已提問 5 個月前檢視次數 376 次

1 個回答

最新
最多得票
最多評論

這些答案是否有幫助？支持正確答案，以幫助社區從您的知識中受益。

Today this is done once a year, and there is no way to automate this to be done every 90 days. Even if you could automate it - SCIM key rotation needs to be done in AWS as well as in the iDP that you are using, so it would not be that straight forward.

You could open a support case, and ask for this to be considered as a feature request.

專家

Max Clements

已回答 4 個月前

專家

Giovanni Lauria

已審閱 1 個月前

Baskaran Viswanathan
4 個月前
Thank you so much for your reply. Currently it supports 2 key. But i would like to delete and generate the keys and store/update it in one of the following

Secrets Manager

KMS

AWS Context

Harshicorp Vault Even if it cannot be automatted programmatically, we have to be regenerated manually and then updated the above mentioned services, Correct. Also there is API for the SCIM API access.

Please let me know, if any of my comments make sense, Thank you so much for your help, time and support

Have a great day Thanks and regards Baskaran Viswanathan

AWS IAM Identity Center SCIM API Key rotation

相關內容