Saturday, March 6, 2021

AWS - Programmatic access, generating API keys

Programmatic access

You must provide your AWS access keys to make programmatic calls to AWS or to use the AWS Command Line Interface or AWS Tools for PowerShell.


When you create your access keys, you create the access key ID (for example, AKIAIOSFODNN7EXAMPLE) and secret access key (for example, wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY) as a set. The secret access key is available for download only when you create it. If you don't download your secret access key or if you lose it, you must create a new one.


You can assign up to two access keys per user (root user or IAM user). Having two access keys is useful when you want to rotate them. When you disable an access key, you can't use it, but it counts toward your limit of two access keys. After you delete an access key, it's gone forever and can't be restored, but it can be replaced with a new access key.


To create an access key when signed in as the root user


Sign in to the AWS Management Console as the root user. For more information, see Sign in as the root user in the IAM User Guide.


In the navigation bar on the upper right, choose your account name or number and then choose My Security Credentials.


Expand the Access keys (access key ID and secret access key) section.


Choose Create New Access Key. If you already have two access keys, this button is disabled.


When prompted, choose Show Access Key or Download Key File. This is your only opportunity to save your secret access key.


After you've saved your secret access key in a secure location, chose Close.


references:

https://docs.aws.amazon.com/general/latest/gr/aws-sec-cred-types.html#access-keys-and-secret-access-keys


No comments:

Post a Comment