Create AWS IAM user expiration policy - Githubissues

hackforla / incubator

https://github.com/orgs/hackforla/projects/73/views/5

GNU General Public License v2.0

3 stars 14 forks source link

Create AWS IAM user expiration policy #88

Open ale210 opened 2 months ago

ale210 commented 2 months ago

Overview

we need a policy for how to manage old IAM accounts, so that we reduce hacking risk.

Action Items

[ ] Write up criteria for deactivating stale accounts
[ ] Add instructions for achieving it
[ ] Discuss with team
[ ] Implement

Decisions to be made

How long
What happens (automatically deleted or notification, combination)
Suggestion: accounts with no login past 180 days should be somethinged (Alex)