Editing IAM Credential Management (section)

== Internal IAM User Automated Access Key Process ==

The following outlines the automated process for rotating access keys for internal IAM users, ensuring compliance with security best practices while minimizing manual intervention.

=== Automated Key Rotation Process ===
# '''Lambda Function''':
#* A <code>access-key-rotation-check</code> Lambda function automatically checks the age of access keys for all internal IAM users.
#* Keys older than 90 days are flagged for rotation.
# '''Key Management''':
#* If a user has:
## '''Two keys''': The oldest key is deleted
## '''One key''': The key is deactivated
# '''Notifications''':
#* The Lambda function sends an email notification to the user stating that the key has been deleted/deactivated
## Access Key ID.
## Secret Access Key.
#* Emails are sent using Amazon SES to ensure secure delivery.
# The process is triggered weekly on Monday using an '''Amazon EventBridge''' schedule.