Changes to Rules IAM Access Keys Are Active
On 21 March 2023, Stax will be releasing a fix to the following rules to remediate an issue resulting in access keys being incorrectly evaluated. This issue only affected the evaluation of credentials for IAM users with multiple access keys. This change may impact the compliance score of these rules.
| Bundle Name | Rule |
|---|---|
| IAM Best Practice Version 1.0 | IAM access keys should be actively used |
| APRA Version 1.0 & 1.1 | IAM access keys should be active |
| CIS Benchmark Version 1.1.0, 1.2.0, 1.3.0, 1.4.0 & 1.5.0 | CIS 1.14 - Ensure access keys are rotated every 90 days or less |
| Organization Rules/Rule Catalog | IAM API keys are active Ensure access keys are rotated every 90 days or less |