Generating AWS Console Credentials
Kron PAM creates a short-lived AWS Console account from an Ephemeral Base account. The Base account remains available as a reusable template while each generated account is temporary.
Verify that the AWS Console Credentials configuration and the required duration values are available before creating the template.
1. Navigate to Secrets > Vault.
2. Create an account or open the existing template and select Edit Account.
3. Select Static in Type and Ephemeral Base in Account Subtype.
4. Select AWS Console Credentials in Configuration.
5. Select the required Account Group and enter an Account Name.
6. Select Next.
7. Select the target AWS Console endpoint in Host (IP/Name).
8. Complete the remaining account fields and save the account.
9. Locate the Ephemeral Base account and open its action menu.
10. Under Password, select Generate Ephemeral Account.
11. Select the required validity period in Duration.
12. Enter the reason for the request in Comment.
13. Select Generate and use the account only during the selected period.
