John Jai
John Jai

Reputation: 3723

Disable programmatic access to AWS

Can we disable programmatic access using access key / secret key to the entire account? In case there is a security breach and the access key and secret key is exposed to the outside world, can the AWS account administrator freeze the programmatic access to the AWS account?

Upvotes: 0

Views: 870

Answers (1)

John Hanley
John Hanley

Reputation: 81386

You can disable or delete an Access Key. You must disable access keys one at a time. There is no "global" disable or delete for access keys.

There are several types of Access Keys:

  1. AWS Root User Access Keys. You should not be using these keys. If you are, issue IAM User Access Keys and delete the root keys.
  2. IAM User Access Keys. These are the key types that you should use for normal access.
  3. Temporary Access Keys. These keys are generated by Roles or Simple Token Service (STS). These keys are temporary and expire.

Managing Access Keys for Your AWS Account Root User

Managing Access Keys for IAM Users

Revoking IAM Role Temporary Security Credentials

Upvotes: 3

Related Questions