Amazon AWS Security: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
No edit summary
No edit summary
Line 4: Line 4:
<center><font color=red>In process of being migrated from https://home.feodorov.com:9443/wiki/Wiki.jsp?page=AmazonSecurity</font></center>
<center><font color=red>In process of being migrated from https://home.feodorov.com:9443/wiki/Wiki.jsp?page=AmazonSecurity</font></center>
<br>
<br>
=Internal=
* [[Amazon AWS#Subjects|Amazon AWS]]
=IAM User=
=API Access Keys=
Each [[#IAM_User|IAM user]] has a set of API access keys. These keys are needed when the user attempts to make programmatic calls to AWS or EC2, using [Amazon EC2 CLI] tools for example. The user can create, modify, view and rotate these access keys.
There are two types of access keys 1) __Access key ID__ (example AKIAIOSFODNN7EXAMPLE) 2) __Secret access key__ (example: wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY).
When creating an access key, IAM returns the access key id and the secret access key. The secret access key is only accessible at the time it was created. If the secret access key is lost, the corresponding access key must be deleted and recreated.
<font color=red>Relationship between Access Key ID and Secret Key?</font>
Can be managed here: [https://console.aws.amazon.com/iam/home?#security_credential] by navigating to Users -> username -> Security Credentials -> Access Credentials.


More about access keys for IAM users: [http://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingCredentials.html]


=Internal=
For details on how access keys can be set in the local environment, see


* [[Amazon AWS#Subjects|Amazon AWS]]
|[Amazon EC2 CLI#SetTheAccessKeys]

Revision as of 17:35, 11 February 2016




In process of being migrated from https://home.feodorov.com:9443/wiki/Wiki.jsp?page=AmazonSecurity


Internal

IAM User

API Access Keys

Each IAM user has a set of API access keys. These keys are needed when the user attempts to make programmatic calls to AWS or EC2, using [Amazon EC2 CLI] tools for example. The user can create, modify, view and rotate these access keys.

There are two types of access keys 1) __Access key ID__ (example AKIAIOSFODNN7EXAMPLE) 2) __Secret access key__ (example: wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY).

When creating an access key, IAM returns the access key id and the secret access key. The secret access key is only accessible at the time it was created. If the secret access key is lost, the corresponding access key must be deleted and recreated.

Relationship between Access Key ID and Secret Key?

Can be managed here: [1] by navigating to Users -> username -> Security Credentials -> Access Credentials.

More about access keys for IAM users: [2]

For details on how access keys can be set in the local environment, see

|[Amazon EC2 CLI#SetTheAccessKeys]