AWS console session expiration

0

Hi,

As far as i understood from "googling" a bit, there is no official AWS solution, for forcing the AWS console session to expire in some certain amount of time, it is always 12 hours. But maybe there is some other "non-official" workarounds? Maybe AWS team has this feature in to-do list?

Thanks

posta un anno fa1007 visualizzazioni
1 Risposta
1
Risposta accettata

It depends on how you are logging into the console. If you are logging in through federation, then you can configure the session duration. For example, However, if you use SAML for authentication, you can include the DurationSeconds parameter. in SAML assertion This parameter specifies the duration of the federated console session. The value can range from 900 seconds (15 minutes) to 43200 seconds (12 hours).

Q: When does my session expire?

For security purposes, a login session will expire 12 hours after you sign in to the AWS Management Console with your AWS or IAM account credentials. To resume your work after the session expires, choose Click login to continue and log in again. The duration of federated sessions varies depending on the federation API (GetFederationToken or AssumeRole) and the administrator’s preference. Please go to our Security Blog to learn more about building a secure delegation solution to grant temporary access to your AWS account.

AWS
Taka_M
con risposta un anno fa
  • Thank you for the answer. We are not using SSO, we are only using IAM features (access keys, role chaining, aws console passwords). But yeah, as i understood, for just IAM user authentication via AWS console the session duration is always 12h, is that the same case even with using MFA?

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande