Add policy pack - Detect Unapproved IAM Users and Aged IAM Access Keys

[Joeturbot]

Control objective Real time alerts for any local users are created and access keys not rotated.

Remediation

• Destroy unapproved IAM users.
• Destroy access keys over a certain age.

Categories

• Access Management
• Security

Additional context Source: https://turbothq.slack.com/archives/C06DF1TE16D/p1723561500674229