AWS access key rotation using AWSLambda or Fortigate API.

[FortDoog]

Good day.

Simple issue: I want to use SDN connectors with an onpremise FW (physical, not cloud). But for PCI compliance, I need to rotate the access keys periodically.

Has anyone encounter a situation to make an automation between the cloud and the firewall, so the firewall pulls the new access keys and installs them into itself? Can it be done using a Lambda or API? (let it be AWS or Fortinet)

I have the feeling that it can be done using the Fortigate API, so I can call it from AWS and pass the new access keys, but wanted to be sure.

Thank you.

#Fortigate

[sjoshi]

Yes, you can automate the AWS access key rotation process for your FortiGate firewall using AWS Lambda and Fortinet API. You can create a Lambda function that retrieves the new access keys from AWS and then uses the Fortinet API to update the access keys on your FortiGate firewall. This automation will help you comply with PCI requirements by periodically rotating the access keys without manual intervention.

[FortDoog]

Hi

do you know where can I find examples for the Fortinet API? 

I got the Fortinet Lambda covered, but cannot find usefull info for the Fortinet API.

Thank you.

[sjoshi]

You can reach out to FNDN

https://docs.fortinet.com/document/fortigate/7.0.0/secgw-for-mobile-networks-deployment/394614/forti...