turbot/aws_compliance

Control: 1 IAM root user access key should not exist

Description

This control checks whether user access keys exist for the root user.

Remediation

To delete access keys

  1. Log in to your account using the root user credentials.
  2. Choose the account name near the top-right corner of the page and then choose My Security Credentials.
  3. In the pop-up warning, choose Continue to Security Credentials.
  4. Choose Access keys (access key ID and secret access key).
  5. To permanently delete the key, choose Delete and then choose Yes. You cannot recover deleted keys.
  6. If there is more than one root user access key, then repeat steps 4 and 5 for each key.

Usage

steampipe check aws_compliance.control.pci_v321_iam_1

SQL

This control uses a named query:

iam_root_user_no_access_keys

Tags