MEDIUM
Source
Trivy
Frameworks

CIS AWS 1.2

ID
AVD-AWS-0144

Credentials which are no longer used should be disabled.

CIS recommends that you remove or deactivate all credentials that have been unused in 90 days or more. Disabling or removing unnecessary credentials reduces the window of opportunity for credentials associated with a compromised or abandoned account to be used.

Impact

Leaving unused credentials active widens the scope for compromise.