VOCE Agent Conformance · ID-02

Short-lived credentials

Are machine credentials short-lived and automatically rotated where the platform supports it?

Identity & workload trustA2+CriticalPermanent control URL
Normative wording

ID-02 · Short-lived credentials

Are machine credentials short-lived and automatically rotated where the platform supports it?

DomainIdentity & workload trust
Expected ownerIAM / Security
Minimum maturityA2+
CriticalityCritical
Target evidence stateTested
Expected evidence

Expected evidence

  • Credential TTL policy
  • Rotation test
Method

How to read this control.

This control belongs to VOCE Agent Conformance. Its identifier and normative wording remain identical across language versions so there is one reference, not three variants. Status depends on dated evidence, not a vendor declaration or aggregate score.

Open Agent Conformance →