# Keeper: GovCloud SSO login 403 error - Resolved

- Impact (vendor’s label): major
- Status: postmortem
- Started: 2023-05-16 02:00 UTC · Resolved: 2023-05-16 02:00 UTC · Duration: 0 min
- Updates: 2 · Affected components: Keeper Admin Console (GovCloud), Keeper Infrastructure (GovCloud) - Keeper Admin Console (GovCloud), Keeper Infrastructure (GovCloud) - Keeper Web Vault (GovCloud), Keeper Web Vault (GovCloud)
- [Vendor status page: https://stspg.io/85ddsjvj5lr9](https://stspg.io/85ddsjvj5lr9)
- [Company: Keeper](https://rewindex.com/company/keeper.md)

## Summary

Keeper reported a major incident affecting some GovCloud SSO logins with 403 errors, impacting the Admin Console and Web Vault. It started and was resolved at 2023-05-16 02:00 UTC; the recorded duration was 0 min. An overly aggressive WAF rule in Amazon Shield blocked requests; DevOps applied WAF rule policy changes to resolve it. _(machine-written, sol)_
## Timeline of updates

- **resolved** 2023-05-16 02:00 UTC: We are aware of 403 errors that were occurring when logging in through GovCloud with SSO. The issue has been resolved. An overly aggressive WAF rule in the Amazon Shield system blocked the requests.
- **postmortem** 2023-05-16 02:04 UTC: Some SSO logins on the GovCloud environment were generating a 403 error. An overly aggressive WAF rule in the Amazon Shield system blocked the requests. The DevOps team applied the necessary WAF rule policy changes to resolve the issue.

## Rewindex changes for this incident

- 2023-05-16 02:00 UTC: [Major incident: GovCloud SSO login 403 error - Resolved](https://rewindex.com/change/i6c2e090f9deca3.md)


---
Canonical: https://rewindex.com/company/keeper/incidents/dyg76k2r4wg8 · Markdown: https://rewindex.com/company/keeper/incidents/dyg76k2r4wg8.md · JSON: https://rewindex.com/api/v1/companies/keeper/incidents/dyg76k2r4wg8 · Generated 2026-10-18T12:35:48.928Z