Control: 1.2 Ensure API keys unused for 180 days are detected and optionally disabled
Description
Monitor API key usage in your account and search for API keys that are unused or used infrequently.
Remediation
You must create an instance of the Activity Tracker with LogDNA service in the Frankfurt region to start tracking IAM events. Use a minimum of a 7-day event search.
Usage
Run the control in your terminal:
powerpipe control run ibm_compliance.control.cis_v100_1_2
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run ibm_compliance.control.cis_v100_1_2 --share
SQL
This control uses a named query:
manual_control