
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A company wants a list of all users in its AWS account, the status of all of the users' access keys, and if multi-factor authentication (MFA) has been configured. Which AWS service or feature will meet these requirements?
A
AWS Key Management Service (AWS KMS)
B
IAM Access Analyzer
C
IAM credential report
D
Amazon CloudWatch
Explanation:
The IAM credential report is a feature that generates a CSV report containing information about all users in your AWS account and the status of their various credentials, including:
User creation time
Password status (enabled/disabled, last used)
Access key information (active/inactive, last used)
MFA device status (configured/not configured)
Password last changed date
Access key rotation details
This makes it the perfect tool for auditing user access and security configurations across an AWS account.
Why other options are incorrect:
AWS KMS: Used for creating and managing encryption keys, not for user credential reporting
IAM Access Analyzer: Helps identify resources shared with external entities, not for comprehensive user credential reporting
Amazon CloudWatch: Monitoring service for AWS resources and applications, not for IAM user credential management