🔑 Best Practices for Managing AWS Access Keys

aws-access-keys-best-practice.txt

Remove or do not generate account access keys
  > Best way to protect your account is not having one
  > Better to create one or more AWS Identity and Access Management users.
  
Use temporary security credentials (IAM Roles) instead of Long-Term Access Keys
  > Create IAM roles and generate temporary security credentials
  > Security token associated with credentials has time to live
 
Use an IAM role and temporary security credentials in the following scenarios:
  > AWS CLI scripts running on EC2
  > Cross account access
  > Mobile App
  Federate into AWS and org support SAML 2.0
  > Federate into AWS org has on prem identity support
  
Manage IAM user access keys properly:
  > Don't embed access keys into code
  > Don't upload the AWS credentials file
  > Choose user env variables
  > Use different access keys for different applications
  > Rotate keys periodically
  > Remove unused access keys
  > Configure MFA