How-to guides¶

Task-oriented. Each page solves one problem and assumes you already know the basics — if you don't, start with the tutorial.

In this section¶

• Use it with IAM Identity Center — the SSO trust model, and the misconfiguration that produces a role nobody can assume.
• Grant someone read access — add a person to the rota, and what you are actually handing them.
• Verify the published certificate — check the certificate still matches the keys in KMS.
• Retire an identity — supersede a certificate without losing the ability to read archived mail.