How-to guides¶

Task-oriented. Each page solves one problem and assumes you already know the basics. If you don't, start with the tutorial.

In this section¶

• Use it with IAM Identity Center: the SSO trust model, and the misconfiguration that produces a role nobody can assume.
• Grant someone read access: add a person to the rota, and what you are actually handing them.
• Verify the published certificate: check the certificate still matches the keys in KMS.
• Retire an identity: supersede a certificate without losing the ability to read archived mail.