User With Multiple SSH Keys

Risk Level

Informational (4)



Identify and deactivate any unnecessary IAM SSH public keys used to authenticate to AWS CodeCommit repositories. Amazon allows you to assign maximum two active SSH keys, however having two keys is recommended only during the key rotation process.
  • Recommended Mitigation

    We recommend having only one SSH key per user