A city’s IAM administrators want a governance report that helps review account credentials and access-related hygiene across IAM users. Which approach aligns with that AWS governance reporting need?
Select an answer to reveal the explanation.
Short Explanation
Credential reports are like a muster roll for keys and passwords — who has what, whether MFA is on, whether keys are stale. Spreadsheets alone are fragile, and sharing root secrets is the opposite of governance. Use the IAM reporting aids AWS already provides.
Full Explanation
AWS IAM provides credential reports and related access reporting that help administrators review credential age, MFA status, and similar hygiene signals for governance. Disabling CloudTrail, relying only on informal spreadsheets, or sharing root credentials works against secure governance practices. Using the built-in reporting features supports accountable access review.