AWS console session expiration

0

Hi,

As far as i understood from "googling" a bit, there is no official AWS solution, for forcing the AWS console session to expire in some certain amount of time, it is always 12 hours. But maybe there is some other "non-official" workarounds? Maybe AWS team has this feature in to-do list?

Thanks

demandé il y a un an1004 vues
1 réponse
1
Réponse acceptée

It depends on how you are logging into the console. If you are logging in through federation, then you can configure the session duration. For example, However, if you use SAML for authentication, you can include the DurationSeconds parameter. in SAML assertion This parameter specifies the duration of the federated console session. The value can range from 900 seconds (15 minutes) to 43200 seconds (12 hours).

Q: When does my session expire?

For security purposes, a login session will expire 12 hours after you sign in to the AWS Management Console with your AWS or IAM account credentials. To resume your work after the session expires, choose Click login to continue and log in again. The duration of federated sessions varies depending on the federation API (GetFederationToken or AssumeRole) and the administrator’s preference. Please go to our Security Blog to learn more about building a secure delegation solution to grant temporary access to your AWS account.

AWS
Taka_M
répondu il y a un an
  • Thank you for the answer. We are not using SSO, we are only using IAM features (access keys, role chaining, aws console passwords). But yeah, as i understood, for just IAM user authentication via AWS console the session duration is always 12h, is that the same case even with using MFA?

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions