1 Answer
- Newest
- Most votes
- Most comments
0
Hello.
How about using AWS Config's "iam-user-unused-credentials-check"?
Using this, I think it's possible to find IAM users that haven't been used for 30 days.
Also, AWS Confign can be used in combination with AWS Organizations, so it's probably possible to find IAM users that aren't being used across multiple accounts.
https://docs.aws.amazon.com/config/latest/developerguide/iam-user-unused-credentials-check.html
IAM Access Analyzer may also be able to find unused IAM users.
https://aws.amazon.com/jp/blogs/aws/iam-access-analyzer-updates-find-unused-access-check-policies-before-deployment/
Relevant content
- AWS OFFICIALUpdated 6 months ago
