Create and Use an API Token
Create an API token, hand it to a script or CI job, rotate it without downtime, and revoke it.
Security
Guides for API tokens, sessions, and custom keychains: create and revoke credentials, sign out a session, and build a keychain.
Categories:
These guides cover the security tasks in Layer5 Cloud. For how keys, keychains, and roles combine into permissions, read the Keys and Keychains concepts. For defaults, lifetimes, and endpoints in one place, see the Security Reference.
| I want to | Go to | Permission needed |
|---|---|---|
| Authenticate a script or CI job to Layer5 Cloud | Create and Use an API Token | Create Token, Download Token |
| Stop a leaked or retired token from working | Revoke an API Token | Delete Token |
| Rotate a token without breaking a pipeline | Rotate a token | Create Token, Delete Token |
| See where I am signed in and end a session | Review and Sign Out Sessions | View Sessions, Delete Token |
| Group keys into a custom keychain | Build a Custom Keychain | Create Keychain, Edit Keychain, Delete Keychain |
Review and Sign Out Sessions
See every active sign-in on your account and end the ones you do not recognize or no longer use.
Build a Custom Keychain
Group keys into a keychain you own, change its keys, and delete it. A role must include the keychain before it grants anything.