IBM Cloud IAM API key expiration and active token validity
IBM Cloud IAM supports expiration for Service ID API keys and Trusted Profile credentials as part of least-privilege authentication designs. The documented behavior for key expiration is that new token requests using the expired credential are rejected. The unresolved behavior concerns IAM access tokens that were issued before the credential expired. Access