DEV Community

Mustang86
Mustang86

Posted on

1.13 Ensure there is only one activeaccess key available for any single IAM user

I am currently trying to automate this process; I understand that the 'aws iam list-access-keys' is usually followed by '--user-name Bob' however this would then require manual intervention to run through each user.

Is it possible to pull all users and active access keys into a single datasource and then return an escalation / email if more than one Active is found per user?

Discussion (0)