User expiration policy Last Login.

Hey there, I would look to write a lambda function that triggers on an eventbridge schedule that enumerates iam users where last login >= 45 days and status = active and disable them.

I would use python myself and the boto3 library. You’ll have to create and grant lambda role IAM user modify access

Here’s a link to something that’s already been written. May save you a job implementing this.

https://serverlessrepo.aws.amazon.com/applications/arn:aws:serverlessrepo:us-east-1:062052777684:applications~disabling-access-for-inactive-IAM-users