This set of CloudFormation templates and Python scripts will set up an auto-rotation function that will automatically rotate your AWS IAM User Access Keys every 90 days.
In access_key_auto_rotation\account_scan.py one adds resource_email
# Update actions with resource owner email from tag
if config.resourceOwnerTag is not '':
..
for action in user_actions:
action.update({"resource_email": resource_owner_email})
but in access_key_auto_rotation\main.py one is looking for resource_owner
# Extract subsets of actions for resource owners
resource_owners = {action.get("resource_owner") for action in action_queue}
In
access_key_auto_rotation\account_scan.py
one addsresource_email
but in
access_key_auto_rotation\main.py
one is looking forresource_owner
resulting no
resource_owners
being found ..