IAM

IAM, Amazon Web Services' identity and access management tool, plays a crucial role in securing your cloud environment.

Regularly reviewing and managing IAM roles and credentials is not directly about cost savings but is imperative for enhancing security and minimizing the attack surface.

By adhering to the principle of least privilege, where users are granted only the permissions necessary for their role, you maintain a more secure environment.

This proactive approach in IAM management, including frequent credentials reviews, ensures that your AWS infrastructure remains robust against potential security threats.

IAM Users

We consider IAM Users who have never been used or inactive for over 90 days as unnecessary.

IAM Roles

We view IAM Roles that are unused or inactive for over 90 days as unneeded, and they also increase the potential attack surface.