Best Practices for API Key Rotation

Follow these steps to avoid downtime when rotating Tamr Cloud API keys:

1. Identify Tamr Cloud API clients and the user account of the API key that needs to be rotated. In these steps, this user account and API key are referred to as the client user account and client API key.
2. On the Admin Center > API Keys page, generate a new temporary API key for a different (non-client) user account. Do not change the client API key at this point.
3. Update all Tamr Cloud API clients identified in step 1 with the temporary API key.
4. Confirm that the Tamr Cloud API clients successfully authenticate with the temporary API key.
5. On the Admin Center > API Keys page, revoke the API key for the client user account. Then, generate a new API key for the client user account.
6. Update all Tamr Cloud API clients identified in step 1 with the new client API key.
7. Confirm that the Tamr Cloud API clients successfully authenticate with the new client API key.
8. On the Admin Center > API Keys page, revoke the temporary API key for the non-client user account.

See Managing API Keys for more information about using the Admin Center > API Keys page.