Answer-first summary for fast verification
Answer: IAM credential report
The IAM credential report is a feature that generates a CSV report containing information about all users in your AWS account and the status of their various credentials, including: - User creation time - Password status (enabled/disabled, last used) - Access key information (active/inactive, last used) - MFA device status (configured/not configured) - Password last changed date - Access key rotation details This makes it the perfect tool for auditing user access and security configurations across an AWS account. **Why other options are incorrect:** - **AWS KMS**: Used for creating and managing encryption keys, not for user credential reporting - **IAM Access Analyzer**: Helps identify resources shared with external entities, not for comprehensive user credential reporting - **Amazon CloudWatch**: Monitoring service for AWS resources and applications, not for IAM user credential management
Author: Ritesh Yadav
Ultimate access to all questions.
A company wants a list of all users in its AWS account, the status of all of the users' access keys, and if multi-factor authentication (MFA) has been configured. Which AWS service or feature will meet these requirements?
A
AWS Key Management Service (AWS KMS)
B
IAM Access Analyzer
C
IAM credential report
D
Amazon CloudWatch
No comments yet.