Only one active access key should exist per user

iam
This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

Access keys are long-term credentials for an IAM user or the AWS account root user. They allow users to sign programmatic requests to the AWS CLI or AWS API. To enhance security, Datadog recommends that you limit users to a single active access key.

Not allowing multiple access keys for a user reduces the risk of misuse or unintended access, contributing to better management of AWS resources.

Remediation

For instructions on managing and deactivating excess IAM access keys, refer to Managing AWS Access Keys.