| 🛡️ Account Has No IAM Users🔴🟠 | 1 | 🔴 x3, 🟠 x5 | no data |
| 🛡️ Account Root User has active access keys🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Account Root User Hardware MFA is not enabled.🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Account Root User MFA is not enabled.🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS IAM User is not managed centrally in multi-account environments🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ AWSCloudShellFullAccess Policy is attached🟢 | 1 | 🟢 x6 | no data |
| 🛡️ IAM Role Unused🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Policy (Customer Managed) Contains Potential Credentials Exposure🔴🟠 | 1 | 🔴 x3, 🟠 x5 | no data |
| 🛡️ Policy allows full administrative privileges🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Root User credentials were used is the last 30 days🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Server Certificate is expired🟢 | 1 | 🟢 x6 | no data |
| 🛡️ User Access Keys are not rotated every 90 days or less🟢 | 1 | 🟢 x6 | no data |
| 🛡️ User has inline or directly attached policies🟢 | 1 | 🟠 x1, 🟢 x5 | no data |
| 🛡️ User has more than one active access key🟢 | 1 | 🟢 x6 | no data |
| 🛡️ User MFA is not enabled for all users with console password🟢 | 1 | 🟢 x6 | no data |
| 🛡️ User with console and programmatic access set during the initial creation🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ User with credentials unused for 45 days or more is not disabled🟢 | 1 | 🟢 x6 | no data |