AWS IAM Compromised Key Quarantine Policy Attached

Google SecOps@GoogleSecOps

•updated Jan 30, 2025•0•0•1

Detect when the AWS managed policy AWSCompromisedKeyQuarantine has been attached to a user, role, or group. It is applied by the AWS team in the event that the credentials of an IAM user has been compromised or publicly exposed.