AWS console session expiration

0

Hi,

As far as i understood from "googling" a bit, there is no official AWS solution, for forcing the AWS console session to expire in some certain amount of time, it is always 12 hours. But maybe there is some other "non-official" workarounds? Maybe AWS team has this feature in to-do list?

Thanks

已提问 1 年前1007 查看次数
1 回答
1
已接受的回答

It depends on how you are logging into the console. If you are logging in through federation, then you can configure the session duration. For example, However, if you use SAML for authentication, you can include the DurationSeconds parameter. in SAML assertion This parameter specifies the duration of the federated console session. The value can range from 900 seconds (15 minutes) to 43200 seconds (12 hours).

Q: When does my session expire?

For security purposes, a login session will expire 12 hours after you sign in to the AWS Management Console with your AWS or IAM account credentials. To resume your work after the session expires, choose Click login to continue and log in again. The duration of federated sessions varies depending on the federation API (GetFederationToken or AssumeRole) and the administrator’s preference. Please go to our Security Blog to learn more about building a secure delegation solution to grant temporary access to your AWS account.

AWS
Taka_M
已回答 1 年前
  • Thank you for the answer. We are not using SSO, we are only using IAM features (access keys, role chaining, aws console passwords). But yeah, as i understood, for just IAM user authentication via AWS console the session duration is always 12h, is that the same case even with using MFA?

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则