TotalCloud Insights: Protect Your AWS Environment by Managing Access Keys Securely

This report recounts an AWS access key theft investigation in which seven IAM access keys were compromised after being found on a publicly exposed Postman server; the attacker made SES-related API calls (GetSendQuota and UpdateAccountSendingEnabled) from unusual user agents and an atypical hosting-provider IP. The document describes detection indicators, remediation actions taken (credential rotation and key disablement), potential service impacts, recommended best practices for key management across cloud providers, and how Qualys TotalCloud can help identify and remediate such misconfigurations.