AWS Security | Automate Key Rotation for IAM Users | Best Practices

What is AWS Access KEY Rotation?
How should admins do Key rotation?
How can we automate Access Key rotation using AWS APIs via Python & Lambda?
Steps involved in AWS Access Key Rotation.
Please join AWS Learning group on LinkedIn - / 10389754
Refer ------------------- boto3.readthed...
&&
aws.amazon.com...
-----------------------------------------------------------
I would request to look at our playlists to learn systematically for AWS Certifications ---
Solutions Architect - • AWS - Associate Certif...
&&&
SysOps Administrator - • AWS SysOps Administrat...
++++++++++++++++++++++++++++++++++++++++
SUBSCRIBE to our youtube channel - / knowledgeindia
I have answered lot of AWS Interview questions in LIVE sessions here -- • AWS Interview Question...
Connect with me on LinkedIn to read interesting AWS updates & Practical Scenario Questions --- / knowledgeindia
Join our AWS Learning Group on LinkedIn - / 10389754
Don't miss any updates, please follow my FB page AWStutorials
&
Twitter - #!/...
And for AWS exercises & case-studies, you can refer our blog -- aws-tutorials....
++++++++++++++++++++++++++++++++++++++++

[@shashankkalose6726]

Very nicely explained. I read about the Access Key rotation on the official study guide but was left with a doubt as to why would someone go with it. You took a real world scenario and explained it so well. Not all knowledge can be gained through books alone.

[@knowledgeindia]

✌️✌️ do check out more videos on our channel..

[@nayaknc2009]

You are really helpful for many. I like your small demos and the way you present it. Keep contributing and help many. My best wishes with you.

[@knowledgeindia]

Thanks Nayak. Looking for your support always, please let your friends know by SHARING this.

[@Sunny160388]

or maybe we can use tags to store email ids and use those tags to email particular users. i learnt so much from your videos in a short span of time, im very thankful. lot of concepts have cleared in my head and you explain everything effortlessly. i regret not coming to KI before. thanks once again!! keep up the good work and effort!

[@knowledgeindia]

Thanks Sunny . Visit our channel and look at latest uploads, you will like those as well ..

[@Somaaliman]

Thanks. This is my first stop if/when i need help and always works for me.

[@knowledgeindia]

Thanks again. Keep sharing and loving us. :) Do join our Linkedin group www.linkedin.com/groups/10389754/

[@hemanthafernando6744]

Very nice explanation, thanks

[@kncharyulu]

Wonderful videos, very well explained. Your videos have been very helpful, Thanks!!!

[@knowledgeindia]

Thanks Kn. SUBSCRIBE to KZbin channel: kzbin.info Watch our videos in correct order: bit.ly/2GVzLti Connect on LinkedIn, receive AWS updates & Practical Scenario Questions - bit.ly/2XC5bZg If you have got benefited, you can support us on PATREON: bit.ly/2TzxTbb Join AWS Practical Learning Group on LinkedIn: bit.ly/2Vx7aOi SUBSCRIBE to our blog for AWS exercises & case-studies: www.knowledgeindia.in/

[@mukundsharma5626]

Hi Sir, This is my first comment on your video, i must say you are doing a great job educating us in this free platform. People used to spend a lot of money for the good stuff which still don`t satisfy them and you on the other hand made things look so easy . A good deed is what you are doing. I am preparing for AWS Solution Architect Associate exam and following your series for the same, please let me know if in case anything else needs to be done .

[@sivasankar-nx6hu]

Nice video.. Keep you posted

[@TheRagarwal2]

Excellent Video

[@BuhlzI]

A good video on how to detect aged access keys. It would be great to see an example of Auto Access Key rotation using Secrets Manager. It functions using a Lambda function.

[@pankajdube2262]

Thank you 🙂.

[@nforlife]

Hi @KI thanks for this video I have been tasked to enable versioning on over 2000 s3 buckets in different accounts using AWS Config and SSM any idea I am required to automate the project

[@rohitchavan9836]

Really appreciate work you do :)

[@knowledgeindia]

Thanks Rohit, please check out our playlists for more -- kzbin.infoplaylists

[@swapshingote9554]

Team...the videos teaching everything is by far the best ..no one is even closer to KI..but why so much ads in between...??

[@durbabanik3372]

Brilliant explanation

[@knowledgeindia]

Thanks Durba. Please recommend to your friends as well .

[@pratapsingh-fp1zs]

good stuff about keys, thanks sir..

[@knowledgeindia]

Thanks Pratap. Looking for your support always, please let your friends know by SHARING this.

[@rafihashimi3495]

I thought you would show us in the function rather than from prewritten AWS scripts. Looking forward to see you create a lambda function and demo all this info.

[@abhisheknittala7181]

very helpful , thank you so much!

[@jksharma7]

very wonderful....

[@knowledgeindia]

Thanks JK :)

[@RahulGupta04]

appreciate

[@knowledgeindia]

Keep supporting us by sharing our videos with your close friends

[@vaibhavpokale3884]

Thank u Sir! Please make sessions on Ansible

[@knowledgeindia]

Vaibhav, I would be true to you. I might not be able to start on Ansible very soon. There are many AWS services yet to be covered. But, I am planning to do Opsworks in coming days. Thanks for your support, keep sharing and loving us. :) Do join Linkedin group www.linkedin.com/groups/10389754/

[@vaibhavpokale3884]

Ok Sir..! Eagerly waiting for your Opsworks session. Thank u so much for your prompt reply...!

[@venkatesh677]

Please do it demo session as well.

[@namangarg86]

Thanks for the video. One query, it will be very difficult to change the access key and secret key for every key rotation on on-prem server. How we can automate this also?

[@knowledgeindia]

yes that's tricky.

[@MrRayapudi]

Hi, Like your videos and way of teaching. I have query Today i came across an interview question on aws. is it possible restrict the user to show only one subnet while creating an ec2 instance after selecting the VPC ? Can help here please.

[@knowledgeindia]

Hi Satish, Thanks for your support, keep sharing and loving us. :) Do join Linkedin group www.linkedin.com/groups/10389754/ for more useful conversation. It is not possible to restrict showing of a particular subnet on AWS console UI. Though, if the user have IAM permissions written in such a manner that it restricts him to launch instances in a subnet, then he might get an error at last. But, in terms of showing if he has rights to describe-subnets, he will see all the subnets. Hope this helps, please share and help us back :)

[@grahul47]

Sir, how frequently we do such key rotation in production environment?

[@knowledgeindia]

typically people stick to 15 to 30 days (depending on company policies).

[@raj00aa1]

can you give steps how to set up with cloudwatch. And also how does an end user know the secret access key after new keys are created.??? Thanks

[@knowledgeindia]

Hear from 19.00 again

[@kalaranjith2609]

Hi, Do you have any built-in script to automate Key Rotation? If 'Yes' can you please share with me.

[@RaviPrkash1987]

page not found error is coming when trying to join group..kindly reslove

[@knowledgeindia]

i guess you have joined right?

[@RaviPrkash1987]

Knowledge India ..yup joined..but 5 mins before page found was coming..then it worked

[@practicaldeen5333]

Should create python loop

[@anshsharma7070]

I want to practise for AWS interviews and discuss with someone who is serious for discussions

[@elitekilleroncodm]

Question...can someone hack my I phone 11pro max with access keys?