| 📝 Account Has No IAM Users 🔴🟠 | 1 | 🔴 x3, 🟠 x5 |
| 📝 Account Root User has active access keys 🟢 | 1 | 🟢 x6 |
| 📝 Account Root User Hardware MFA is not enabled. 🟢 | | 🟢 x3 |
| 📝 Account Root User MFA is not enabled. 🟢 | 1 | 🟢 x6 |
| 📝 AWS IAM User is not managed centrally in multi-account environments 🟢 | | 🟢 x3 |
| 📝 AWSCloudShellFullAccess Policy is attached 🟢 | 1 | 🟢 x6 |
| 📝 IAM Role Unused 🟢 | 1 | 🟢 x6 |
| 📝 Policy (Customer Managed) Contains Potential Credentials Exposure 🔴🟠 | 1 | 🔴 x3, 🟠 x5 |
| 📝 Policy allows full administrative privileges 🟢 | 1 | 🟢 x6 |
| 📝 Root User credentials were used is the last 30 days 🔴🟢 | 1 | 🔴 x1, 🟢 x6 |
| 📝 Server Certificate is expired 🟢 | 1 | 🟢 x6 |
| 📝 User Access Keys are not rotated every 90 days or less 🟢 | 1 | 🟢 x6 |
| 📝 User has inline or directly attached policies 🟢 | 1 | 🟠 x1, 🟢 x5 |
| 📝 User has more than one active access key 🟢 | 1 | 🟢 x6 |
| 📝 User MFA is not enabled for all users with console password 🟢 | 1 | 🟢 x6 |
| 📝 User with console and programmatic access set during the initial creation 🟢 | | 🟢 x3 |
| 📝 User with credentials unused for 45 days or more is not disabled 🟢 | 1 | 🟢 x6 |