AWS access keys are really easy to create and really easy to forget about. A developer creates one for a script, a CI job uses another, someone leaves the company, a workload changes, and six months later the key is still active.
While building Kultarr, I wanted one place where I could quickly see which keys are active, which ones are older than 90 days, which have never been used, which belong to privileged identities, and whether a root account still has an access key.
So I built this view.
The main thing I wanted to avoid was another security dashboard that just throws numbers at you. A 300 day old read only key and a 300 day old administrator key are not the same problem, so the view also adds context around privilege, usage, age and status.
The idea is pretty simple: open one page and immediately understand what actually deserves attention.
Kultarr is still early and I’m building it around real AWS problems I’ve run into rather than trying to pack it with random features.
Curious how other teams handle this today. Do you rotate access keys automatically, use AWS Config/Security Hub, internal scripts, or still review them manually?
Top comments (0)