What are IBM Cloud API keys?

IBM Cloud API keys are credentials that are associated with a user’s identity in an IBM Cloud account. Only a specific user can create, update, and delete an API key for themself in an account. The API key often acts as both a unique identifier and a secret token for authentication, and it has a set of access privileges that is specific to the user who created it. API keys can be used in the command-line interface (CLI) or as part of automation to log in to applications as a specific user. 

API key cleanup for users removed from an account 

When you remove a user from an account, all of the Identity and Access Management (IAM) access policies for the user are deleted, so the user loses all access to resources in that account. However, previously, the API keys for removed users were not deleted automatically, so API keys still existed for users without access to the account. 

Don’t worry, this wasn’t a security issue because the user’s access is taken away when they are removed from the account. However, before the recent changes, if you happened to add the user back to the account, the API keys they created for themselves were still available to be used again. 

We understand that you might not expect the API keys to be kept after you remove a user, so we updated the way API keys are handled for users that are removed from an account. There is no action or cleanup that you need to do. IBM Cloud now completes the following actions on your behalf when you remove a user from your account:

  • If a user is removed from an account, the API keys are immediately removed.
  • If a user is added back to an account, the API keys that they previously created are no longer available or valid.
  • If a user was removed from an account before this update, we’ll make sure that their API keys are removed too.

Check out the documentation to learn more about API keys in IBM Cloud.

Categories

More from Announcements

Introducing IBM Sterling Order Management on Microsoft Azure

4 min read - IBM and Microsoft believe in providing you with the power of choice so you can leverage the industry-leading omnichannel fulfillment capabilities of Sterling Order Management Software (OMS) along with your existing skills and investment in native Azure services.  IBM and Microsoft provide you with the ability to confidently deploy Sterling OMS on Azure using Azure Red Hat OpenShift (ARO) or Azure Kubernetes Service (AKS), with the added flexibility of using multiple native Azure services. The reference architecture details are available…

IBM TechXchange underscores the importance of AI skilling and partner innovation

3 min read - Generative AI and large language models are poised to impact how we all access and use information. But as organizations race to adopt these new technologies for business, it requires a global ecosystem of partners with industry expertise to identify the right enterprise use-cases for AI and the technical skills to implement the technology. During TechXchange, IBM's premier technical learning event in Las Vegas last week, IBM Partner Plus members including our Strategic Partners, resellers, software vendors, distributors and service…

Introducing Inspiring Voices, a podcast exploring the impactful journeys of great leaders

< 1 min read - Learning about other people's careers, life challenges, and successes is a true source of inspiration that can impact our own ambitions as well as life and business choices in great ways. Brought to you by the Executive Search and Integration team at IBM, the Inspiring Voices podcast will showcase great leaders, taking you inside their personal stories about life, career choices and how to make an impact. In this first episode, host David Jones, Executive Search Lead at IBM, brings…

IBM watsonx Assistant and NICE CXone combine capabilities for a new chapter in CCaaS

5 min read - In an age of instant everything, ensuring a positive customer experience has become a top priority for enterprises. When one third of customers (32%) say they will walk away from a brand they love after just one bad experience (source: PWC), organizations are now applying massive investments to this experience, particularly with their live agents and contact centers.  For many enterprises, that investment includes modernizing their call centers by moving to cloud-based Contact Center as a Service (CCaaS) platforms. CCaaS solutions…