Short-lived credential
In short: A short-lived credential is a token or certificate that expires within minutes or hours and is often scoped to one task. If it leaks, it stops working on its own. Short-lived credentials replace the static API keys that agents commonly hold in code or configuration files.
Which controls use this term?
- GOV-05Short-lived credentials. Issue agents credentials that expire within minutes or hours and are scoped to a task, instead of static keys or long-lived tokens.
Which terms are related?
Non-human identity, Just-in-time access, Standing privilege.
Reviewed by The Register desk