AWS IAM Quick Fixes

This is the home for "quick fixes" to remediate IAM security findings identified by k9 Security.

These quick fixes are meant to be executed by an engineer with minimal tools in a bash shell with appropriate AWS permissions:

• AWS CLI
• curl

Quick Fixes

• Drop IAM admin privileges
• Remove IAM role
• Remove IAM user
• Deactivate IAM user API access key
• Delete IAM user API access key
• Rotate IAM user API access key
• Deactivate IAM User Password and Remove AWS Console Access
• Force IAM user password rotation
• Enable monitoring of IAM administrative actions
• Exercise break-glass process

---

Last update: February 5, 2026