Once the deadline passes, customers will no longer be able to retrieve pre-existing secret access keys, though they will be able to rotate them, he said. Amazon recommends creating user account access ...

AWS root access keys Another AWS root account best practice is to delete any programmatic access keys associated with the root user. If a PEM file or DER certificate exists for the root account, that ...

Miller said that if these are developers that are creating applications for corporations and the corporation's AWS keys are leaked, someone could potentially go in and clean them out.