AWS Console Session Timeout

Question

There is a way to limit the AWS console session timeout to less than 1 hour?

I didn't find any option for this in the console or policy/role in the IAM. Please assist.

Thanks for the help.

Solution

If you are using the console and IAM credentials, there is no way to restrict it to less than one hour.

When does my session expire?

For security purpose, a login session will expire in 12 hours when you sign into the AWS Management Console with your AWS or IAM account credentials. To resume your work after the session expires, we ask you to click the "Click login to continue" button and login again. The duration of federated sessions varies depending on the federation API (GetFederationToken or AssumeRole) and the administrator’s preference. Please go to our Security Blog to learn more about building a secure delegation solution to grant temporary access to your AWS account.

However if you use SAML, then you can restrict it to as low as 15 minutes to as high as 36 hours.

Creating a URL that Enables Federated Users to Access the AWS Management Console

Comments

[Simon Faiman]

Thanks for the answer.