| Plugin Title | IAM Role Last Used |
| Cloud | AWS |
| Category | IAM |
| Description | Ensures IAM roles that have not been used within the given time frame are deleted. |
| More Info | IAM roles that have not been used for a long period may contain old access policies that could allow unintended access to resources if accidentally attached to new services. These roles should be deleted. |
| AWS Link | https://aws.amazon.com/about-aws/whats-new/2019/11/identify-unused-iam-roles-easily-and-remove-them-confidently-by-using-the-last-used-timestamp/ |
| Recommended Action | Delete IAM roles that have not been used within the expected time frame. |