| Disable IAM User | AWS Static Access Key Used | iam:DeleteLoginProfile,iam:UpdateAccessKey |
| Disable IAM User | Console Login | iam:DeleteLoginProfile,iam:UpdateAccessKey |
| Disable IAM User | IAM User Created | iam:DeleteLoginProfile,iam:UpdateAccessKey |
| Disable IAM User | Multiple Failed Login Attempts For IAM User | iam:DeleteLoginProfile,iam:UpdateAccessKey |
| Disable IAM User | New IAM User Created An EBS Snapshot | iam:DeleteLoginProfile,iam:UpdateAccessKey |
| Disable S3 Bucket Public Access | S3 Bucket Permissions Modified | s3:PutBucketPublicAccessBlock |
| Disable IAM User | Unauthorized User in Use | iam:DeleteLoginProfile,iam:UpdateAccessKey |
| Disable IAM User | UnauthorizedAccess Followed By Create User | iam:DeleteLoginProfile,iam:UpdateAccessKey |
| Disable IAM User | Unexpected User Activity | iam:DeleteLoginProfile,iam:UpdateAccessKey |