> For the complete documentation index, see [llms.txt](https://docs.forestall.io/fsprotect/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/fsprotect/search-and-reports/aws-entities/aws-iam-access-key.md).

# IAM Access Key

### AWS IAM Access Key Fields

| Field           | Type | Possible Operators                            | Description                                                                                                     |
| --------------- | ---- | --------------------------------------------- | --------------------------------------------------------------------------------------------------------------- |
| Guid            | TEXT | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY | A unique identifier that is a combination of the GUID of the selected Scan and the Access Key ID.               |
| AccessKeyId     | TEXT | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY | The unique identifier for this access key. Used as the access key ID in API calls.                              |
| OwnerArn        | TEXT | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY | The Amazon Resource Name (ARN) of the IAM user who owns this access key.                                        |
| Status          | TEXT | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY | The status of the access key. Can be `Active` or `Inactive`. Active keys can be used to authenticate API calls. |
| LastUsedService | TEXT | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY | The AWS service that was most recently accessed using this access key (e.g., `s3`, `ec2`).                      |
| LastUsedRegion  | TEXT | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY | The AWS region where this access key was most recently used.                                                    |
| CreateDate      | DATE | SMALLER, LARGER, BETWEEN, EQUAL               | The date and time when the access key was created.                                                              |
| LastUsedDate    | DATE | SMALLER, LARGER, BETWEEN, EQUAL               | The date and time when the access key was most recently used to sign an AWS API request.                        |