AWS
IAM Access Keys
IAM access keys with age, last-used date and service — stale and unused keys called out first.
Live preview — demo data
What this pane shows
Per-user listing of IAM access keys with creation date, age in days, last-used timestamp, the AWS service the key was last used against and the region. Keys older than 90 days, keys unused for 90 days, and keys never used at all are surfaced first.
Key use cases
- Rotate access keys older than policy threshold.
- Delete unused keys (lower attack surface; reduce policy violations).
- Investigate which keys are still being used by which services after a service-account refactor.
- Audit IAM-user hygiene during a SOC 2 or ISO 27001 review.
How to embed
lp.js is the single-entry loader: it injects the shared LightPane runtime
(and sd-embed.css) once per page. Add this pane's own stylesheet and script;
the pane mounts itself wherever the matching <div> is in the DOM.
<!-- In <head> — this pane's stylesheet -->
<link rel="stylesheet" href="https://lightpane.io/_pane-tests/aws/iam-keys/iam-keys.css">
<!-- Your access key (inline, or set window.lpEmbed.accessKey from your own JS) -->
<script>window.lpEmbed = { accessKey: "<your-access-key>" };</script>
<!-- Where the pane should appear -->
<div class="lp-iam-keys-panel" data-lp-account="<your-account-alias>"></div>
<!-- Before </body> — shared loader + this pane's script -->
<script src="https://lightpane.io/embed/lp.js"></script>
<script src="https://lightpane.io/_pane-tests/aws/iam-keys/iam-keys.js" defer></script>
Tier
Available on Explorer and above.
Build notes
Mock-only at the moment — live-wiring tracked in the roadmap.