aws-rotate-key

by stefansundin

384stars

51forks

12watchers

Updated about 1 year ago

About

A CLI tool that simplifies and automates the secure rotation of AWS IAM user access keys.

Easily rotate your AWS access key. :key:

Primary Use Case

This tool is used by AWS IAM users and administrators to periodically rotate their AWS access keys as a security best practice, reducing the risk of compromised credentials. It automates the process of listing, deleting, creating, and deactivating access keys, ensuring compliance and minimizing manual errors during key rotation.

Key Features

Lists current access keys associated with the IAM user
Automates deletion or deactivation of old access keys
Creates new access keys and updates AWS credentials file
Supports MFA authentication for enhanced security
Allows use of different AWS CLI profiles
Provides confirmation prompts before making changes
Supports automatic confirmation to enable scripting
Cross-platform installation via binaries, Homebrew, PPA, or Go

Installation

Download binaries from the GitHub releases section
Install on macOS using Homebrew: brew install aws-rotate-key
Install on Ubuntu Linux using PPA: sudo add-apt-repository ppa:stefansundin/aws-rotate-key
Then run: sudo apt install aws-rotate-key
Build and install using Go: go install github.com/stefansundin/aws-rotate-key@latest

Usage

>_ aws-rotate-key --help

Displays usage information and available command line options.

>_ aws-rotate-key --profile work

Rotates access keys for the AWS CLI profile named 'work', listing keys and prompting for confirmation.

>_ aws-rotate-key -y

Runs the key rotation process with automatic 'yes' to all prompts, enabling non-interactive use.

>_ aws-rotate-key -mfa

Enables MFA support during the rotation process for enhanced security.

>_ aws-rotate-key -d

Deletes the old access key instead of just deactivating it after creating a new key.

Security Frameworks

Credential Access

Defense Evasion

Persistence

Discovery

Collection

Usage Insights

Integrate aws-rotate-key into CI/CD pipelines to automate credential rotation and reduce human error.
Combine with AWS CloudTrail monitoring to detect anomalous access key usage and enforce rotation policies.
Use MFA enforcement with this tool to strengthen authentication and prevent unauthorized key usage.
Leverage scripting mode (-y flag) for scheduled rotation jobs to maintain compliance without manual intervention.
In purple team exercises, simulate compromised keys and test the effectiveness of automated rotation in reducing dwell time.

Docs Take 2 Hours. AI Takes 10 Seconds.

Ask anything about aws-rotate-key. Installation? Config? Troubleshooting? Get answers trained on real docs and GitHub issues—not generic ChatGPT fluff.

This tool hasn't been indexed yet. Request indexing to enable AI chat.

Admin will review your request within 24 hours

Security Profile

Red Team20%

Blue Team90%

Purple Team70%

Details

LicenseMIT License

LanguageGo

Open Issues12

Topics

aws