· ai-devtools
What happens when the agent is long gone, but its access key lives on?
Imagine: There's a line on the credential report that no one on the platform team can explain.
An IAM user called research-agent-2 has an access key created 14 months ago that was last used 11 months ago. The project it supported closed long ago, and the person who approved it doesn't even work at the company anymore. While this example is hypothetical, the lifecycle problem isn't.
An agent is created for a task, the task ends, and nobody revisits its access. A departing person triggers offboarding; a finished agent just leaves a closed tab. AWS IAM user access keys don't expire automatically, so a forgotten key stays valid until somebody disables or deletes it. "A departing person triggers offboarding; a finished agent just leaves a closed tab."
