Critical
IAM
IAM root user access key should not exist
CISHIPAA
Description
Checks if the IAM root user access key exists. The root user should not have an access key.
Remediation
To remove the IAM root user access key, follow these steps:
Steps
- Sign in to the AWS Management Console using your root user credentials.
- Navigate to the IAM dashboard at https://console.aws.amazon.com/iam/.
- In the navigation pane, click on 'Users'.
- Click on the root user account to view its details.
- In the 'Security credentials' tab, locate the 'Access keys' section.
- If an access key exists, click on 'Delete' next to the access key.
- Confirm the deletion to remove the access key.
- Consider creating an IAM user with necessary permissions and use it for daily administrative tasks instead of the root user.
Compliance
CISHIPAA