IAM Roles Anywhere: AWS Access With Zero Static Keys
Every environment I have audited has the same ghost.
An IAM user with an access key and a secret key. Created for a script, a cron job, a device that needed to reach AWS. It worked, so nobody touched
blog.leastprivilege.cloud8 min read