Query: 1.5 Ensure no owner account API key exists

Description

API keys by definition allow access to your account and resources in your account. The API key inherits all assigned access for the user identity for which it is created, therefore an API key created by an account owner has account-owner level access to resources in the account.

Query

Tables used in this query:

• ibm_account
• ibm_iam_api_key

Controls using this query:

• 1.5 Ensure no owner account API key exists

SQL