AWS CCP: What should you use to audit the permissions of your users? What kind of info does that service give you?

Question

What should you use to audit the permissions of your users? What kind of info does that service give you?

Grace Minnis · Accepted Answer

IAM Credential Report. It gives you:
Password usage and change dates.
Activity/rotation status of access keys.
Whether MFA is enabled.

What should you use to audit the permissions of your users? What kind of info does that service give you?