Loading controls...

Control: 1.10 Ensure user auth tokens rotate within 90 days or less


Auth tokens are authentication tokens generated by Oracle. You use auth tokens to authenticate with APIs that do not support the Oracle Cloud Infrastructure signature-based authentication. If the service requires an auth token, the service-specific documentation instructs you to generate one and how to use it.


OCI Native IAM

From Console

  1. Login to OCI Console.
  2. Select Identity from the Services menu.
  3. Select Users from the Identity menu.
  4. Click on an individual user under the Name heading.
  5. Click on Auth Tokens in the lower left-hand corner of the page.
  6. Delete any auth token with a date of 90 days or older under the Created column of the Auth Tokens.

From Command Line

  1. Execute the following:
oci iam auth-token delete --user-id <user_OCID> --auth-token-id <id from above>
  1. You will then be prompted with the below:
Are you sure you want to delete this resource? [y/N]
  1. Type 'y' and press 'Enter'.


Run the control in your terminal:

steampipe check oci_compliance.control.cis_v110_1_10

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share oci_compliance.control.cis_v110_1_10


This control uses a named query: