You can securely share copies of static secret item types you’ve saved in Akeyless with anyone, even if they don’t use Akeyless or are part of your organization based on a well-defined TTL.

When you share an item, you’ll get a unique link that you need to share with those users. Choose when the link expires and who are the specific users that will be able to access it.

🚧

Warning

For security purposes, only the users you've specified their email will be able to access the item using this link

Sharing Static Secret from the Akeyless Console

1. Log in to the Akeyless Console, and go to Items > Choose the relevant Static Secret.

2. Click on the item menu on the upper right and click Share.

3. Choose when the link expires and who to share it with. If you choose to share the item with only some people, enter each email address and press Return or Enter

4. Click Copy, then send the link to the person or people you want to share the item with, like in an email or text message. After they verify their email address, they’ll have access to the item

To view a shared item, click or tap the link you were sent to open it in your browser. After you’ve verified your email address, you can view and copy the item or other item details that were shared with you until the link expires.

Sharing Static Secret from the Akeyless CLI

To share an item in the CLI, or to view the previous shares of the item, use the following command:

akeyless share-item --item-name <item name> --action <action to perform> --email <email address>

Where:

• item-name: The name of the item to examine, this parameter is mandatory

• action: The action to perform on the item, you may choose share to share an item, stop to stop sharing an item, or describe to see with what addresses it was already shared, this parameter is mandatory.

• email: List of emails to start/stop sharing the secret with, To specify multiple emails use argument multiple times (--email email1 --email email2 etc.). This parameter is mandatory for start or stop actions.

Managing Shared Items

Once an item has been shared, a full auditing activity is logged into Akeyless audit logs, to remove a user from an item, Admins or the item owners can remove those users from the sharing list.

Navigate to the shared item, and remove the relevant email address from the Recipient email address list.

Admins can easily find new temporary Access Roles for those users who received temporary access. Simply delete those temporary Access Roles to revoke the share.

Tutorial

Check out our tutorial video on Sharing a Static Secret.