github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/avd_docs/aws/iam/AVD-AWS-0166/docs.md (about) 1 2 3 Disabling or removing unnecessary credentials will reduce the window of opportunity for credentials associated with a compromised or abandoned account to be used. 4 5 6 ### Impact 7 Leaving unused credentials active widens the scope for compromise. 8 9 <!-- DO NOT CHANGE --> 10 {{ remediationActions }} 11 12 ### Links 13 - https://console.aws.amazon.com/iam/ 14 15