aws iam update-access-key --access-key-id
aws iam update-access-key --access-key-id <id> --status Active|Inactive [--user-name <name>]
Risk: Careful
What it does
Switches an access key off (Inactive) or on (Active). The key is kept.
When to use it
When rotating, or right after a leak. Careful: apps using the key stop working.
Example
$ aws iam update-access-key --access-key-id AKIAIOSFODNN7EXAMPLE --status Inactive --user-name BobSwitch Bob's old key off, but keep it for now.
Learn it in: Access keys: avoid them, rotate them · Official docs