Plugin Title | IAM Role Last Used |
Cloud | AWS |
Category | IAM |
Description | Ensures IAM roles that have not been used within the given time frame are deleted. |
More Info | IAM roles that have not been used for a long period may contain old access policies that could allow unintended access to resources if accidentally attached to new services. These roles should be deleted. |
AWS Link | https://aws.amazon.com/about-aws/whats-new/2019/11/identify-unused-iam-roles-easily-and-remove-them-confidently-by-using-the-last-used-timestamp/ |
Recommended Action | Delete IAM roles that have not been used within the expected time frame. |