When AWS detects this exposure, we automatically apply a policy to quarantine the IAM user with the compromised credentials to drastically limit the actions available to that user, and we notify ...

User Identity Details CloudTrail offers critical information about the principal making the AWS request. This includes the user type ... Request parameters include action-specific details, like ...

These types of "long-lived" credentials pose a risk for users across all major cloud service providers, and must meet their very timely ends, researchers say.