AWS console session expiration

0

Hi,

As far as i understood from "googling" a bit, there is no official AWS solution, for forcing the AWS console session to expire in some certain amount of time, it is always 12 hours. But maybe there is some other "non-official" workarounds? Maybe AWS team has this feature in to-do list?

Thanks

feita há um ano1007 visualizações
1 Resposta
1
Resposta aceita

It depends on how you are logging into the console. If you are logging in through federation, then you can configure the session duration. For example, However, if you use SAML for authentication, you can include the DurationSeconds parameter. in SAML assertion This parameter specifies the duration of the federated console session. The value can range from 900 seconds (15 minutes) to 43200 seconds (12 hours).

Q: When does my session expire?

For security purposes, a login session will expire 12 hours after you sign in to the AWS Management Console with your AWS or IAM account credentials. To resume your work after the session expires, choose Click login to continue and log in again. The duration of federated sessions varies depending on the federation API (GetFederationToken or AssumeRole) and the administrator’s preference. Please go to our Security Blog to learn more about building a secure delegation solution to grant temporary access to your AWS account.

AWS
Taka_M
respondido há um ano
  • Thank you for the answer. We are not using SSO, we are only using IAM features (access keys, role chaining, aws console passwords). But yeah, as i understood, for just IAM user authentication via AWS console the session duration is always 12h, is that the same case even with using MFA?

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas