Comment by scarface_74

Why did you have users in your AWS account besides a couple of emergency break glass users?

All other users should have been going through some SSO using Microsoft AD, Okta, etc.