IAM Security Tools

IAM Credentials Report (account-level)

• Generates a downloadable report listing all IAM users in the account and the status of their credentials.

• Includes details such as password last used, access key age, and whether MFA is enabled.

• Useful for auditing security posture and identifying unused or outdated credentials.

IAM Access Advisor (user-level)

• Displays all AWS services a specific user has permissions to access and the last time each service was used.

• Helps identify unnecessary permissions and supports the principle of least privilege by allowing policy adjustments based on actual usage.