# --- [IAM Access Key만 삭제 (User 유지)] ---
Write-Host "`n🔐 [Global] IAM Access Keys만 삭제 (콘솔 계정 유지)" -ForegroundColor Magenta

$usersRaw = aws iam list-users --query "Users[].UserName" --output text

if ($null -ne $usersRaw -and $usersRaw -ne "") {
    $users = $usersRaw.Split("`t")

    foreach ($user in $users) {
        if (-not $user) { continue }

        Write-Host "  - Checking User: $user" -ForegroundColor Cyan

        # Access Key 조회
        $keysRaw = aws iam list-access-keys --user-name $user --query "AccessKeyMetadata[].AccessKeyId" --output text

        if ($null -ne $keysRaw -and $keysRaw -ne "") {
            foreach ($key in $keysRaw.Split("`t")) {
                Write-Host "    - Deleting AccessKey: $key" -ForegroundColor Yellow
                aws iam delete-access-key --user-name $user --access-key-id $key
            }
        } else {
            Write-Host "    - No AccessKey (콘솔 전용 계정)" -ForegroundColor Green
        }
    }
}

Write-Host "✅ IAM Access Key 삭제 완료 (User는 유지됨)" -ForegroundColor Green