1.23 false positive

[etendards]

I have many service accounts that do not have console passwords. But their API key were created at the same time as the account. Can the report script be updated to exclude those accounts without console passwords?

"ControlId": "1.23",
"Description": "Do not setup access keys during initial user setup for all IAM users that have a console password",

[pchaganti]

👍