More
AWS Foundational Security Best Practice
IAM users' access keys should be rotated every 90 days or less
This AWS control checks whether the active access keys are rotated within 90 days.