User management is a problem best solved once. Rather than creating IAM users for each individual in your organization, you can instead use AWS Identity Center (previously AWS SSO) to use your existing identity provider (Google Enterprise, Office 365, etc) to authenticate with AWS.

This removes the need to create any IAM users at all, leaving your organization more secure since there are no credentials or long lived keys to manage for AWS. Users authenticate via SSO and assume IAM roles that you define, which can be permit anything from admin global access to read only.

AWS Identity Center can even be used for your CI/CD pipelines, which will eliminate the need to keep long lived keys in your code repositories. Check out our blog post on this topic for an in depth explanation.