---
id: 6986
title: "A new type of long-lived key on AWS: Bedrock API keys"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/a-new-type-of-long-lived-key-on-aws-bedrock-api-keys"
published_at: "2025-08-21T12:18:13Z"
tags: ["cloud", "cloud-security", "aws", "iam", "api-keys", "credentials", "bedrock"]
phying_url: "https://phying.com/item/6986"
lang: en
---

# A new type of long-lived key on AWS: Bedrock API keys

## Summary

Wiz's Scott Piper reviews AWS Bedrock API keys: long-term keys quietly create IAM users with an over-privileged policy, while a short-term variant offers a safer path — SCPs can block the former.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2025-08-21T12:18:13Z
- **Original:** https://www.wiz.io/blog/a-new-type-of-long-lived-key-on-aws-bedrock-api-keys
- **Phying News:** https://phying.com/item/6986