improved

User-based API token management 🔑

Bridgecrew extended API token management. We now offer the ability to generate, manage, and delete multiple keys for different integrations with the following capabilities:

  • Tokens are specific per user and enforce the role and permission assigned to that user within the organization.
  • Users who are designated as Owner can view token’s UUIDs for all users and, if necessary, delete them.
  • You can use our Token APIs to List, Create, and Delete tokens. This can be used to automate key rotations.

Note that legacy organization-wide tokens can still be used but we advise generating new tokens, per user.