MEDIUM
Source
CloudSploit
ID
users-password-last-used

Users Password Last Used

Detect users that have not logged in for a period of time and should be deactivated.

Having multiple user accounts that have been inactive for a period of time can increase the risk of security attacks and breaches.

Delete old user accounts that allow password-based logins and have not been used recently.