| Plugin Title | Access Keys Extra |
| Cloud | AWS |
| Category | IAM |
| Description | Detects the use of more than one access key by any single user |
| More Info | Having more than one access key for a single user increases the chance of accidental exposure. Each account should only have one key that defines the users permissions. |
| AWS Link | http://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingCredentials.html |
| Recommended Action | Remove the extra access key for the specified user. |
- Log in to the AWS Management Console.
- Select the "Services" option and search for IAM.
- Scroll down the left navigation panel and choose "Users" under "Access Management".
- Select the "User" that needs to be verified and click on the "User name" to access the selected "IAM User" and go to its configuration page.
- Under "Security Credentials" tab check the number of "Access Key ID". If there are more than "One Access Key ID" for the selected user than it increases the chance of accidental exposure.
- To remove the extra "Access Key" click on the cross(×) symbol at the extreme right to remove the selected key.
- Click on "Deactivate" button in the delete confirmation popup box.
- Enter "Access key Id" in the text box and press the "Delete" button to delete the extra "Access Key".
- Repeat steps number 4 - 8 to check the "Access Keys" for all other IAM users.
