AWS
This tutorial provides step-by-step instructions on how to rotate an AWS Access Key.
Generate a new AWS access key
Step 1 - Navigate to the Access keys page
1a. Navigate to Security Credentials
In the upper-right hand corner, click on your AWS account name. This will display a dropdown menu. Click on Security Credentials
.
1b. Scroll down to the Access Keys
section
Step 2 - Generate a new Access key
2a. Click on Create access key
2b. Copy the Access key
and Secret access key
values
You can download the new keys in a .csv
file by clicking on Download .csv file
.
Replace the Leaked AWS Key
Replace the leaked AWS key with the new one in all impacted applications and services.
Revoke the Leaked AWS key
Step 1 - Navigate to the Access keys page
1a. Navigate to Security Credentials
In the upper-right hand corner, click on your AWS account name. This will display a dropdown menu. Click on Security Credentials
.
1b. Scroll down to the Access Keys
section
Step 2 - Deactivate the key
2a. Click Actions
and then Deactivate
Click the checkbox next to the key you want to delete. Click on the Actions
menu and then press Deactivate
.
2b. Click Deactivate
Step 3 - Delete the key
3a. Click Actions
and then Delete
Once the key status is “inactive”, you can delete the key. Click the checkbox next to the key you want to delete. Click on the Actions
menu and then press Delete
.
3b. Type the key and Click Delete
Copy/paste the access key into the input field and then click Delete
.