AWS Certified Cloud Practitioner
Get started today
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A company wants a list of all users in its AWS account, the status of all of the users' access keys, and if multi-factor authentication (MFA) has been configured. Which AWS service or feature will meet these requirements?
Real Exam
Community
RRitesh
A
AWS Key Management Service (AWS KMS)
B
IAM Access Analyzer
C
IAM credential report
D
Amazon CloudWatch
Explanation:
Explanation
The IAM credential report is the correct answer because:
-
IAM credential report provides a detailed CSV report that includes:
-
All IAM users in the AWS account
-
Status of each user's access keys (active/inactive)
-
MFA device configuration status
-
Password last used/changed dates
-
User creation dates
-
Why other options are incorrect:
-
AWS Key Management Service (AWS KMS): Used for encryption key management, not for user credential reporting
-
IAM Access Analyzer: Helps identify resources shared with external entities, not for comprehensive user credential reporting
-
Amazon CloudWatch: A monitoring service for AWS resources and applications, not for IAM user credential reports
How to generate an IAM credential report:
-
Go to AWS Management Console → IAM
-
Navigate to "Credential report" in the left sidebar
-
Click "Download report" to get a CSV file with all user credential information
This report is essential for security audits, compliance checks, and monitoring user access patterns.
Comments
Loading comments...