What happens when the agent is long gone, but its access key lives on?
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
The article describes how a forgotten, still-active IAM access key can outlive the agent and project it served, and why that is a security risk. It recommends a CloudQuery SQL query to surface IAM user keys unused for 90 days, pairing that inventory with human ownership review and deploy-time policies…