Ensure That Access Key Rotation Is Less Than 90 Days
Access keys consist of an access key ID and a secret access key used to sign programmatic requests that you make to AWS. AWS users need their access keys to make programmatic calls to AWS from the AWS Command Line Interface (AWS CLI), Tools for Windows PowerShell, the AWS SDKs, or direct HTTP calls using the APIs for individual AWS services. It is recommended that all access keys be regularly rotated. Rotating access keys will reduce the window of opportunity for an access key associated with a compromised or terminated account to be used. Access keys should be rotated to ensure that data cannot be accessed with an old key that might have been lost, cracked, or stolen.
Updated 7 months ago