An AWS access key never expires. So the one a contractor pasted into a repo in 2019 probably still controls your account today. Researchers found 88% of leaked keys still work. Delete root keys, disable old ones, set a billing alarm. Read the filing #aws #credentials #cloud #infosec
