MEDIUMCIS 1.3

Ensure auth tokens are rotated within 90 days

Oracle Cloud auth tokens should be rotated every 90 days.

Security Impact

Long-lived tokens increase the window for credential compromise.

How to Remediate

Generate new auth tokens and update applications. Delete tokens older than 90 days.

Affected Resources

OCI::Identity::AuthToken

Compliance Frameworks

CIS OCI v1.2.0SOC 2PCI-DSS

How TigerGate Helps

TigerGate continuously monitors your Oracle Cloud environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

  • Continuous Scanning

    Automatically scans all Oracle Cloud Identity and Access Management resources across your Oracle Cloud tenancies every hour

  • Instant Alerts

    Get notified via Slack, email, or webhooks when this misconfiguration is detected

  • One-Click Remediation

    Fix this issue directly from the TigerGate dashboard with our guided remediation

  • Compliance Evidence

    Automatically collect audit evidence for CIS OCI v1.2.0, SOC 2, PCI-DSS compliance

  • Drift Detection

    Get alerted if this configuration drifts back to an insecure state after remediation

Check Details

Check ID
oracle-iam-3
Service
Oracle Cloud Identity and Access Management
Category
Credential Management
Severity
MEDIUM
CIS Benchmark
1.3

Automate This Check

TigerGate automatically scans your Oracle Cloud environment for this and 50+ other security checks.

Start Free Trial

Related Oracle Cloud Identity and Access Management Checks

View all checks
oracle-iam-1critical

Ensure MFA is enabled for all IAM users

oracle-iam-2medium

Ensure API keys are rotated within 90 days

oracle-iam-4medium

Ensure customer secret keys are rotated within 90 days

oracle-iam-5high

Ensure IAM policies are not overly permissive

oracle-iam-6high

Ensure tenancy administrator group is restricted