Ensure credentials unused for 90 days or greater are disabled

1.3 Identity and Access Management (AWS CIS Benchmark).


AWS IAM users can access AWS resources using different types of credentials, such as passwords or access keys.

It is recommended that all credentials that have been unused for 90 or more days be removed or deactivated.

Remove or deactivate credentials via the AWS Management Console

Step 1. Log in to the AWS Management Console at https://console.aws.amazon.com/vpc/home.

Step 2. Click on Services.

Step 3. Click on IAM.

Step 4. Click on Users.

Step 5. Click on Security Credentials.

Step 6. As an Administrator, click on Make Inactive for credentials that have not been used in 90 Days.

As an IAM User, click on Make Inactive or Delete for credentials that have not been used in 90 days.