Which compliance frameworks require ensure iam users have at most one active access key?

This security check is required by the following compliance frameworks: SOC 2, NIST 800-53.

MEDIUM

Ensure IAM users have at most one active access key

Each IAM user should have at most one active access key at a time. Multiple active keys complicate rotation and increase the attack surface.

Security Impact

Multiple active keys per user complicate key management and increase the chance of key compromise.

How to Remediate

Remove extra access keys from users with multiple active keys. During rotation, briefly have two keys but delete the old one promptly.

Affected Resources

AWS::IAM::AccessKey

Compliance Frameworks

SOC 2NIST 800-53

How TigerGate Helps

TigerGate continuously monitors your AWS environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

Continuous Scanning
Automatically scans all Identity and Access Management (IAM) resources across your AWS accounts every hour
Instant Alerts
Get notified via Slack, email, or webhooks when this misconfiguration is detected
One-Click Remediation
Fix this issue directly from the TigerGate dashboard with our guided remediation
Compliance Evidence
Automatically collect audit evidence for SOC 2, NIST 800-53 compliance
Drift Detection
Get alerted if this configuration drifts back to an insecure state after remediation