Skip to content

Commit

Permalink
Corrected typos
Browse files Browse the repository at this point in the history
  • Loading branch information
mattfeltonma committed Jul 3, 2019
1 parent a86bb5b commit 3139ef2
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
This Lambda queries an AWS account for a listing of all AWS IAM User access keys, their ages, and information on their last usage.

## What problem does this solve?
AWS IAM User access keys and secret keys are used to provide 3rd party access to AWS resources when AWS IAM Roles are not an option. Managing the lifecycle of the keys can difficult and often leads to stale keys which are never rotated or disabled which creates a security risk. While [Credential Reports](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html) provide some of this information, it is often user centric verus key centric. It also does not provide the key IDs which creates more work to determine which key needs to be rotated.
AWS IAM User access keys and secret keys are used to provide 3rd party access to AWS resources when AWS IAM Roles are not an option. Managing the lifecycle of the keys can difficult and often leads to stale keys which are never rotated or disabled which creates a security risk. While [Credential Reports](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html) provides some of this information, it is user centric verus key centric. It also does not provide the key IDs which creates more work to determine which key needs to be rotated.

The script queries the AWS IAM API to pull a listing of AWS IAM Users from an account, queries for a listing of the access keys each account has provisioned, and then pulls metadata about each key including the creation date, the last date the key was used, and more. The data is outputed to a variable in CSV format and written to an S3 bucket.

Expand Down

0 comments on commit 3139ef2

Please sign in to comment.