IAM User / S3 Bucket Keys Expiry – Synergist Express Ltd

Introduction

This article explains what to do when IAM keys have expired or failed to roll automatically for a Synergist Cloud Instance. The goal is to guide you through identifying the affected IAM user, understanding the issue, and generating replacement keys to restore access.

In the Synergist Cloud environment, IAM keys are critical for managing secure access to resources such as S3 buckets, where site attachments and files are stored. Each Synergist instance relies on an associated IAM user, which is identifiable by its domain in the format "SynergistExpress –<SynergistLicenseNumber=>".

If key rotation fails or keys have expired, you’ll need to locate the relevant IAM user, verify its key status, and, if necessary, create new access and secret keys. Once generated, these new credentials must be entered into your Synergist instance under Utilities → System Parameters to re-establish connectivity.

The steps below outline how to identify the affected IAM user, check key status, and safely update the credentials.

IAM User List

Purpose: Show where to find IAM users
Steps:

Go to AWS Console

Navigate to IAM

Click Users in the left sidebar

Click on the IAM User

User Security Credentials Tab

Purpose: Show where to find access keys
Steps:

Click on the relevant user

Go to the Security credentials tab

Deactivate/Delete Access Key

Purpose: Show how to deactivate and delete a key
Steps:

Click Deactivate from actions, you will get a message of confirm

Then click Delete, you will be asked to confirm the Key and delete

Create New Access Key

Purpose: Show how to generate a new key
Steps:

Click Create access key select the Application running on an AWS CS

Generate the Key-> Copy the Access Key ID and Secret Access Key OR download the csv as a temp measure

Synergist Integration Settings

Purpose: Show where to paste the new credentials
Steps:

Go to the System Parameters

Locate the AWS credential fields

Copy the Key into IAM Access Key

Copy the Secret IAM key in to that field

Perform test to see if it works.