Explanation

The IAM credential report is the correct answer because:

• IAM credential report provides a detailed CSV report that includes:
  • All IAM users in the AWS account
  • Status of each user's access keys (active/inactive)
  • MFA device configuration status
  • Password last used/changed dates
  • User creation dates

Why other options are incorrect:

• AWS Key Management Service (AWS KMS): Used for encryption key management, not for user credential reporting
• IAM Access Analyzer: Helps identify resources shared with external entities, not for comprehensive user credential reporting
• Amazon CloudWatch: A monitoring service for AWS resources and applications, not for IAM user credential reports

How to generate an IAM credential report:

1. Go to AWS Management Console → IAM
2. Navigate to "Credential report" in the left sidebar
3. Click "Download report" to get a CSV file with all user credential information

This report is essential for security audits, compliance checks, and monitoring user access patterns.