4 ms·
But that person does have to if you have another key, you can. Fix the situation yourself. It’s also helpful when you use a key that lives in a machine to not
by mattnewton 8y ago
But that person does have to if you have another key, you can. Fix the situation yourself.
It’s also helpful when you use a key that lives in a machine to not have to remove it. If you lose the machine, use another key to sign in and disavow the lost key.
- Johnny555 8y agoMy company's security policy doesn't allow us to have more than one key. If I have one key and someone takes it, I know it immediately. If I have 2 keys and someone steals my spare, then I might not realize it for quite some time.
- iends 8y agoYes, but other people at your company have keys and they can reset your key. In many situations when you're using keys yourself, there is not trusted person that can verify your identity in person and reset your key.
- Buge 8y agoMaybe this AWS feature is designed for companies, not individual users.
- deleted 8y ago[deleted]
- baq 8y agodoes your company also disallow having backup keys to your office or company cars? you're supposed to have multiple keys so you're not effed if you lose one.
- zwily 8y agoThat’s what the backup codes are for.
- Johnny555 8y agoI don't have a company car, but my office key is stamped "do not duplicate" and is a commercial keyblank that is not easy to duplicate.
- baq 8y agoso your company's security/office building security has duplicates readily available and most likely there are multiple master keys in existence, too.
- rando444 8y agoHence your company policy. With AWS you are the company, and you should be allowed to set your own policy, and decide things like whether you trust yourself enough to store a backup key in a safe or something similar. Suggesting Amazon should treat you like some employee of theirs is silly.
- sudhirj 8y agoThis works if you're not the ultimate owner of the account - and if they're working off a single key stored in the office safe I might work. But for personal accounts, solo founders, travellers etc this is a no-go.