Help Center/ Config/ User Guide/ Resource Compliance/ Built-In Policies/ Identity and Access Management/ A User Does Not have Multiple Active Access Keys
Updated on 2024-10-28 GMT+08:00
View PDF
Share

A User Does Not have Multiple Active Access Keys

Rule Details

Table 1 Rule details

Parameter

Description

Rule Name

iam-user-single-access-key

Identifier

iam-user-single-access-key

Description

If an IAM user has multiple access keys in the active state, this user is noncompliant.

Tag

iam

Trigger Type

Configuration change

Filter Type

iam.users

Configure Rule Parameters

None

Applicable Scenario

Access keys are identity credentials that IAM users can use to call APIs. To improve resource security, each IAM user is advised to be assigned only one active access key.

Solution

You can delete or disable the additional access keys for noncompliant IAM users. For more details, see Managing Access Keys for an IAM User.

Rule Logic

  • If an IAM user is in the disabled state, this user is compliant.
  • If an IAM user that is in the enabled state has only one active access key, this IAM user is compliant.
  • If an IAM user that is in the enabled state has multiple active access keys, this IAM user is noncompliant.