Explanation
The IAM credential report is the correct answer because:
- IAM credential report provides a detailed CSV report that includes:
- All IAM users in the AWS account
- Status of each user's access keys (active/inactive)
- MFA device configuration status
- Password last used/changed dates
- User creation dates
Why other options are incorrect:
- AWS Key Management Service (AWS KMS): Used for encryption key management, not for user credential reporting
- IAM Access Analyzer: Helps identify resources shared with external entities, not for comprehensive user credential reporting
- Amazon CloudWatch: A monitoring service for AWS resources and applications, not for IAM user credential reports
How to generate an IAM credential report:
- Go to AWS Management Console → IAM
- Navigate to "Credential report" in the left sidebar
- Click "Download report" to get a CSV file with all user credential information
This report is essential for security audits, compliance checks, and monitoring user access patterns.