turbot/aws_compliance
Loading controls...

Control: 4 IAM root user access key should not exist

Description

This control checks whether user access keys exist for the root user.

Remediation

To delete access keys

  1. Log in to your account using the root user credentials.
  2. Choose the account name near the top-right corner of the page and then choose My Security Credentials.
  3. In the pop-up warning, choose Continue to Security Credentials.
  4. Choose Access keys (access key ID and secret access key).
  5. To permanently delete the key, choose Delete and then choose Yes. You cannot recover deleted keys.
  6. If there is more than one root user access key, then repeat steps 4 and 5 for each key.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.foundational_security_iam_4

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.foundational_security_iam_4 --share

SQL

This control uses a named query:

iam_root_user_no_access_keys

Tags