turbot/ibm_compliance

Control: 1.2 Ensure API keys unused for 180 days are detected and optionally disabled

Description

Monitor API key usage in your account and search for API keys that are unused or used infrequently.

Remediation

You must create an instance of the Activity Tracker with LogDNA service in the Frankfurt region to start tracking IAM events. Use a minimum of a 7-day event search.

Usage

Run the control in your terminal:

powerpipe control run ibm_compliance.control.cis_v100_1_2

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run ibm_compliance.control.cis_v100_1_2 --share

SQL

This control uses a named query:

manual_control

Tags