{"id":38,"date":"2015-07-11T14:47:26","date_gmt":"2015-07-11T14:47:26","guid":{"rendered":"https:\/\/www.arqbackup.com\/blog\/?p=38"},"modified":"2019-01-22T13:15:40","modified_gmt":"2019-01-22T13:15:40","slug":"time-to-remove-or-rotate-your-aws-access-keys","status":"publish","type":"post","link":"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/","title":{"rendered":"“Time to remove or rotate your AWS access keys”"},"content":{"rendered":"

If you receive an email from Amazon Web Services with the title “Time to remove or rotate your AWS access keys” it’s because you’ve got root access keys<\/a> in your account that are more than a year old, and Amazon wants you to remove them.<\/p>\n

If you’re using Arq<\/a> to back up your files to AWS, you probably created a root access key over a year ago and used that to configure Arq to back up to S3 or Glacier.<\/p>\n

Originally, you could log into the AWS console and see your root key pairs (access key ID and secret access key) just by clicking on a link. But in April 2014, AWS removed the ability to retrieve your root access keys<\/a>, for 2 reasons. First, they want you to store the secret access key yourself, not make it easily viewable through the AWS console. Second, they’d rather you use IAM<\/a> to create a key pair that has specific access to resources, rather than a root key pair that has permission to do everything.<\/p>\n

You have 3 choices:<\/p>\n

    \n
  1. Ignore the email and keep using the key pair you’re using<\/li>\n
  2. Create a new root key pair and use that<\/li>\n
  3. Create an IAM user and use that<\/li>\n<\/ol>\n

    Remove Your Root Access Key<\/h2>\n

    Your AWS account can have multiple root key pairs, plus multiple IAM key pairs. These are not separate accounts; they all give you access to the same data in your account (depending on the key pair’s permissions).<\/p>\n

    To remove a root access key, go to the Security Credentials<\/a> page. (If you get a pop-up about IAM, click “Continue to Security Credentials”.)<\/p>\n

    Next, click on the + sign next to “Access Keys”. You’ll see a list of your root access keys. Click “Delete” next to each one to delete it.<\/p>\n

    Create a New Root Access Key<\/h2>\n

    (If you’d rather switch to IAM and limit the permissions of the key pair you create, follow the instructions in IAM and Arq<\/a> instead.)<\/p>\n

    Click the Create New Access Key button to generate a new key pair:<\/p>\n

    \"remove<\/a><\/p>\n

    Click the “Download Key File” to save the key pair on your hard drive. It’ll be in your Downloads folder, probably named “rootkey.csv”.<\/p>\n

    Click the “Show Access Key” link to see both the Access Key ID and the Secret Access Key on screen.<\/p>\n

    Configure Arq with the New Key Pair<\/p>\n

    Next, launch Arq and pick “Preferences” from Arq’s menu. Click on the Destinations tab. Then double-click your destination and click “Change Credentials”.<\/p>\n

    \"Change<\/a><\/p>\n

    Copy your new key pair into the fields and click Update.<\/p>\n

    \"Enter<\/a><\/p>\n

    Now Arq is configured to use your new key pair.<\/p>\n","protected":false},"excerpt":{"rendered":"

    If you receive an email from Amazon Web Services with the title “Time to remove or rotate your AWS access keys” it’s because you’ve got root access keys in your account that are more than a year old, and Amazon wants you to remove them. If you’re using Arq to back up your files to AWS, you […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"yoast_head":"\n"Time to remove or rotate your AWS access keys" message<\/title>\n<meta name=\"description\" content=\"Did Amazon send you a "Time to remove or rotate your AWS access keys" email? Here's how to do that.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\""Time to remove or rotate your AWS access keys" message\" \/>\n<meta property=\"og:description\" content=\"Did Amazon send you a "Time to remove or rotate your AWS access keys" email? Here's how to do that.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/\" \/>\n<meta property=\"og:site_name\" content=\"Arq Backup Blog\" \/>\n<meta property=\"article:published_time\" content=\"2015-07-11T14:47:26+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-01-22T13:15:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.arqbackup.com\/blog\/wp-content\/uploads\/2015\/07\/create-aws-access-key.png\" \/>\n<meta name=\"author\" content=\"Stefan Reitshamer\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@arqbackup\" \/>\n<meta name=\"twitter:site\" content=\"@arqbackup\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Stefan Reitshamer\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/\"},\"author\":{\"name\":\"Stefan Reitshamer\",\"@id\":\"https:\/\/www.arqbackup.com\/blog\/#\/schema\/person\/5ab08ca5321801d96a6dd155fcd650a2\"},\"headline\":\"“Time to remove or rotate your AWS access keys”\",\"datePublished\":\"2015-07-11T14:47:26+00:00\",\"dateModified\":\"2019-01-22T13:15:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/\"},\"wordCount\":447,\"publisher\":{\"@id\":\"https:\/\/www.arqbackup.com\/blog\/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/\",\"url\":\"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/\",\"name\":\"\\\"Time to remove or rotate your AWS access keys\\\" message\",\"isPartOf\":{\"@id\":\"https:\/\/www.arqbackup.com\/blog\/#website\"},\"datePublished\":\"2015-07-11T14:47:26+00:00\",\"dateModified\":\"2019-01-22T13:15:40+00:00\",\"description\":\"Did Amazon send you a \\\"Time to remove or rotate your AWS access keys\\\" email? Here's how to do that.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.arqbackup.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"“Time to remove or rotate your AWS access keys”\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.arqbackup.com\/blog\/#website\",\"url\":\"https:\/\/www.arqbackup.com\/blog\/\",\"name\":\"Arq Backup Blog\",\"description\":\"Trustworthy backup\",\"publisher\":{\"@id\":\"https:\/\/www.arqbackup.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.arqbackup.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.arqbackup.com\/blog\/#organization\",\"name\":\"Haystack Software LLC\",\"url\":\"https:\/\/www.arqbackup.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.arqbackup.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.arqbackup.com\/blog\/wp-content\/uploads\/2015\/07\/icon_256x256.png\",\"contentUrl\":\"https:\/\/www.arqbackup.com\/blog\/wp-content\/uploads\/2015\/07\/icon_256x256.png\",\"width\":256,\"height\":256,\"caption\":\"Haystack Software LLC\"},\"image\":{\"@id\":\"https:\/\/www.arqbackup.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/twitter.com\/arqbackup\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.arqbackup.com\/blog\/#\/schema\/person\/5ab08ca5321801d96a6dd155fcd650a2\",\"name\":\"Stefan Reitshamer\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.arqbackup.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/46d2aebc6760035113223c21178854d5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/46d2aebc6760035113223c21178854d5?s=96&d=mm&r=g\",\"caption\":\"Stefan Reitshamer\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\"Time to remove or rotate your AWS access keys\" message","description":"Did Amazon send you a \"Time to remove or rotate your AWS access keys\" email? Here's how to do that.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/","og_locale":"en_US","og_type":"article","og_title":"\"Time to remove or rotate your AWS access keys\" message","og_description":"Did Amazon send you a \"Time to remove or rotate your AWS access keys\" email? Here's how to do that.","og_url":"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/","og_site_name":"Arq Backup Blog","article_published_time":"2015-07-11T14:47:26+00:00","article_modified_time":"2019-01-22T13:15:40+00:00","og_image":[{"url":"https:\/\/www.arqbackup.com\/blog\/wp-content\/uploads\/2015\/07\/create-aws-access-key.png"}],"author":"Stefan Reitshamer","twitter_card":"summary_large_image","twitter_creator":"@arqbackup","twitter_site":"@arqbackup","twitter_misc":{"Written by":"Stefan Reitshamer","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/#article","isPartOf":{"@id":"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/"},"author":{"name":"Stefan Reitshamer","@id":"https:\/\/www.arqbackup.com\/blog\/#\/schema\/person\/5ab08ca5321801d96a6dd155fcd650a2"},"headline":"“Time to remove or rotate your AWS access keys”","datePublished":"2015-07-11T14:47:26+00:00","dateModified":"2019-01-22T13:15:40+00:00","mainEntityOfPage":{"@id":"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/"},"wordCount":447,"publisher":{"@id":"https:\/\/www.arqbackup.com\/blog\/#organization"},"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/","url":"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/","name":"\"Time to remove or rotate your AWS access keys\" message","isPartOf":{"@id":"https:\/\/www.arqbackup.com\/blog\/#website"},"datePublished":"2015-07-11T14:47:26+00:00","dateModified":"2019-01-22T13:15:40+00:00","description":"Did Amazon send you a \"Time to remove or rotate your AWS access keys\" email? Here's how to do that.","breadcrumb":{"@id":"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.arqbackup.com\/blog\/time-to-remove-or-rotate-your-aws-access-keys\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.arqbackup.com\/blog\/"},{"@type":"ListItem","position":2,"name":"“Time to remove or rotate your AWS access keys”"}]},{"@type":"WebSite","@id":"https:\/\/www.arqbackup.com\/blog\/#website","url":"https:\/\/www.arqbackup.com\/blog\/","name":"Arq Backup Blog","description":"Trustworthy backup","publisher":{"@id":"https:\/\/www.arqbackup.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.arqbackup.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.arqbackup.com\/blog\/#organization","name":"Haystack Software LLC","url":"https:\/\/www.arqbackup.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.arqbackup.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.arqbackup.com\/blog\/wp-content\/uploads\/2015\/07\/icon_256x256.png","contentUrl":"https:\/\/www.arqbackup.com\/blog\/wp-content\/uploads\/2015\/07\/icon_256x256.png","width":256,"height":256,"caption":"Haystack Software LLC"},"image":{"@id":"https:\/\/www.arqbackup.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/twitter.com\/arqbackup"]},{"@type":"Person","@id":"https:\/\/www.arqbackup.com\/blog\/#\/schema\/person\/5ab08ca5321801d96a6dd155fcd650a2","name":"Stefan Reitshamer","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.arqbackup.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/46d2aebc6760035113223c21178854d5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/46d2aebc6760035113223c21178854d5?s=96&d=mm&r=g","caption":"Stefan Reitshamer"}}]}},"_links":{"self":[{"href":"https:\/\/www.arqbackup.com\/blog\/wp-json\/wp\/v2\/posts\/38"}],"collection":[{"href":"https:\/\/www.arqbackup.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.arqbackup.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.arqbackup.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.arqbackup.com\/blog\/wp-json\/wp\/v2\/comments?post=38"}],"version-history":[{"count":22,"href":"https:\/\/www.arqbackup.com\/blog\/wp-json\/wp\/v2\/posts\/38\/revisions"}],"predecessor-version":[{"id":271,"href":"https:\/\/www.arqbackup.com\/blog\/wp-json\/wp\/v2\/posts\/38\/revisions\/271"}],"wp:attachment":[{"href":"https:\/\/www.arqbackup.com\/blog\/wp-json\/wp\/v2\/media?parent=38"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.arqbackup.com\/blog\/wp-json\/wp\/v2\/categories?post=38"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.arqbackup.com\/blog\/wp-json\/wp\/v2\/tags?post=38"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}