AWS Access Keys Don’t Expire: Govern the Exceptions, Not Just the Rotation Date

An AWS IAM user access key can remain valid long after the workload, integration, or person that needed it is gone. The credential does not know that a migration finished or a pipeline was replaced. U