So, AWS just sent us an "ACTION REQUIRED" notice saying that because we have Simple AD, it's a best practice to rotate the kbrtgt password every 90 days.
Following the instructions given for trying to find the appropriate instance, I went into the EC2 instances, but there's only one instance (which okay, I know what that one is), it's not a Windows Server instance, it's a Linux server instance. But there's no user "kbrtgt". Now, there's instructions for seamlessly joining an Amazon EC2 Linux instance to your Simple AD Active Directory, but... do I actually need to do any of this?
My concern is that I don't think we've ever actually used this, that while we have Simple AD, it's largely gone untouched (I certainly haven't done anything with it in two years), and that while password rotation is of course, a best practice, I don't know if that user exists unless I join a Linux instance to the AD directory.
Can someone explain to me what this is, and if it is actually necessary? (Please note that I fell into this job, and there's no one else at the company I work for that I can ask.)
