Hacker News Reader

Why did you have users in your AWS account besides a couple of emergency break glass users?

All other users should have been going through some SSO using Microsoft AD, Okta, etc.

I did not come up with the system

IAM users are still needed in large orgs because of legacy tooling that only accepts access key ID / secret access key sigh.