---
title: Generating AWS Console Credentials
slug: kronpam-reference-guide-3-9-0/generating-aws-console-credentials
docTags: 
createdAt: 2026-10-10T13:48:37.576Z
---

Kron PAM creates a short-lived AWS Console account from an Ephemeral Base account. The Base account remains available as a reusable template while each generated account is temporary.

Verify that the **AWS Console Credentials** configuration and the required duration values are available before creating the template.

                  1.            Navigate to **Secrets** > **Vault**.

                  2.            Create an account or open the existing template and select **Edit Account**.

                  3.            Select **Static** in **Type** and **Ephemeral Base** in **Account Subtype**.

                  4.            Select **AWS Console Credentials** in **Configuration**.

                  5.            Select the required **Account Group** and enter an **Account Name**.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/6vPU5mQ0nSqZdIdZBDDld_image.png "Figure - Ephemeral Base account definition for AWS Console Credentials")

6.      Select **Next**.

7.      Select the target AWS Console endpoint in **Host (IP/Name)**.

8.      Complete the remaining account fields and save the account.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/XZr17D9_WDvUmmYIzMRtm_image.png "Figure - AWS Console host selected for the Ephemeral Base account")

9.      Locate the Ephemeral Base account and open its action menu.

10.      Under **Password**, select **Generate Ephemeral Account**.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/NNjHhh7O_B17yqvpEaB61_image.png "Figure - Generate Ephemeral Account operation on the AWS Ephemeral Base account")

11.      Select the required validity period in **Duration**.

12.      Enter the reason for the request in **Comment**.

13.      Select **Generate** and use the account only during the selected period.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/84iTgwd5YL-u_4EsZyeN2_image.png "Figure - Expiration duration and required comment for the generated AWS account")