Skip to content

Commit 5130ed5

Browse files
adityatapsclaude
andcommitted
fix(aws/org): reduce admin SSO session from 12h to 6h
Security review flagged 12h as excessive blast radius for a leaked AdministratorAccess token. 6h balances hackathon workflow friction against that risk on this personal account. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
1 parent 9cf272b commit 5130ed5

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

providers/aws/org/main.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ resource "aws_identitystore_user" "aditya" {
4646
resource "aws_ssoadmin_permission_set" "admin" {
4747
name = "AdministratorAccess"
4848
instance_arn = local.sso_instance_arn
49-
session_duration = "PT12H"
49+
session_duration = "PT6H"
5050
}
5151

5252
resource "aws_ssoadmin_managed_policy_attachment" "admin" {

0 commit comments

Comments
 (0)