Critical
IAM
IAM root user access key should not exist
CISHIPAA
Description
Confirms that no access keys exist for the IAM root user.
Remediation
To remove the IAM root user access key, follow these steps:
Steps
- Sign in to the AWS Management Console using your root user credentials.
- Navigate to the IAM dashboard at https://console.aws.amazon.com/iam/.
- In the navigation pane, click on 'Users'.
- Click on the root user account to view its details.
- In the 'Security credentials' tab, locate the 'Access keys' section.
- If an access key exists, click on 'Delete' next to the access key.
- Confirm the deletion to remove the access key.
- Consider using an IAM user with necessary permissions for daily administrative tasks.
Compliance
CISHIPAA