Which AWS service can a company use to identify IAM access keys that have not been rotated recently?

AWS Trusted Advisor is the correct answer because it provides recommendations across five categories, including security. One of its security checks identifies IAM access keys that have not been rotated in the last 90 days, helping improve security posture. AWS WAF (Web Application Firewall) protects web applications from common exploits. AWS Shield is a managed Distributed Denial of Service (DDoS) protection service. Amazon Cognito provides user sign-up, sign-in, and access control for web and mobile apps. These services do not directly monitor IAM access key rotation.