lacework-global-118
Rotate public ssh keys every 45 days or less
Description
Identity and Access Management (IAM) SSH key pairs enable access to AWS CodeCommit repositories. Best practices recommend regularly rotating SSH public keys to limit your window of exposure for any compromised keys.
Remediation
Perform the following to rotate public SSH keys:
- Log in to the AWS Management Console.
- Click Services.
- Click IAM and select Users.
- Open the IAM user of interest and select the Security Credentials tab.
- Click Make Inactive for keys that are older than 45 days.
- Click Upload SSH public key to upload a new public key created by the IAM user.
- After the IAM user tests the change, delete the inactive key.