Answer: Generate a new access key pair for the user.

The correct answer is B. When an IAM user loses their secret access key, the best practice is to create a new user with a new access key and a new secret access key. This ensures that the lost key is invalidated and any potential security risks are mitigated. Option A is incorrect because AWS does not allow retrieval of lost secret access keys for security reasons. Option C, rotating the secret access key, is a process where a new key is created and the old one is invalidated, but if the key is lost, the user cannot rotate it themselves. Option D is incorrect because AWS Support cannot provide a new secret access key; users must manage their keys through the IAM console. Therefore, the recommended and secure action is to create a new user with new credentials.

Author: LeetQuiz Editorial Team