Review the service accounts and keys inventory
Review the service accounts and keys inventory to assess the security posture of user-created or system-created identities in your org.
About this task
The Inventory displays summaries and details of your service accounts and keys.
Procedure
- In the Identity Security Posture Management console, go to Inventory > Non-human identities > Service accounts & keys.
-
Review the summaries at the top of the page.
- Identities: The total count of service accounts, keys, and tokens
- Identities by source: A summary of service accounts and keys by identity provider
- Identities and credentials: A summary of service accounts and keys grouped by their authentication method
- Last rotation: A summary of the key and token's last rotation
-
Review the service accounts and keys table.
- Account: The name of the service account, with an icon indicating its source
- Credentials: All authentication methods that are configured for the account, such as client secrets and certificates
- Privileges: The service account's admin permission level
- Identity types: The type of identity (service, keys, or tokens)
- Last activity: The most recent activity that's logged by the account (usually a login)
- Last key rotation: The oldest credential rotation date across all methods for the account
- Last password change: The date of the account's last password change
- Issues: Rotation and usage of service accounts, keys, and tokens
- Date created: The date the service account was created
-
Review an account's details in the side pane.
- Overview: A single page summary of the account's details, issues, sign-in and MFA analysis, and activity
- MFA: The MFA requirements for the account and resulting status
- Groups & Roles: The groups and roles that are assigned to the service account
- Login Methods: The methods configured for the org