What's new?

• Dormant service-specific credentials and SSH public keys can now be deactivated as well as deleted. AWS > IAM > Service Specific Credential > Active and AWS > IAM > SSH Public Key > Active add Enforce: Deactivate inactive with ... warning values alongside their existing Enforce: Delete inactive with ... warning values, so you pick the enforcement that suits each resource.
• AWS > IAM > SSH Public Key > Allowed > Custom adds Enforce: Deactivate if not allowed and Enforce: Deactivate if not allowed and resource is new alongside its existing delete values. A key that fails your custom rules can either be set to Inactive and left on the user, so you can re-enable it if the rule needs adjusting, or deleted outright as before.

Action Types

Added

• AWS > IAM > SSH Public Key > Deactivate
• AWS > IAM > Service Specific Credential > Deactivate