No more than one active SSH public key should be assigned to a single user

Documentos > Datadog Security > OOTB Rules > No more than one active SSH public key should be assigned to a single user

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

This control ensures that no more than one active SSH public key is assigned to a single IAM user.

Limiting the number of active SSH public keys per user helps reduce the attack surface and minimizes the complexity of managing user access. This practice strengthens security by ensuring better control over user credentials.

Remediation

To enforce a policy of having only one active SSH public key per IAM user, review and manage SSH keys through the AWS Management Console, CLI, or API. Refer to the AWS IAM User Guide for instructions on managing user credentials and SSH keys.