Neglected assets

User with Unused Credentials

Risk Level

Informational (4)

Platform(s)

Description

Orca has detected that the user {AwsUser} has unused credentials, such as a password or access keys. It is recommended to remove such credentials, in order to reduce their likelihood of being used in case the user's account is compromised.
  • Recommended Mitigation

    Disable or remove any unused user credentials such as access keys and passwords in order to protect your resources against unapproved access. User credentials are considered unused when these are not being used for 90 days or more