Your company is performing a security audit of your AWS environment. The security specialist asked you to provide a document that contained the status of all IAM users in the AWS account. The document should include information such as when users were created, when passwords were used or changed, whether MFA was enabled, etc. What is the best way to provide this documentation?

Answer options:

A.Use IAM CLI list-users to generate the JSON document for the status of all IAM users.
B.Generate and download an IAM credential report through AWS Management Console or AWS SDKs.
C.In AWS Config, select the resource type as IAM:user and download the resource inventory for all IAM users.
D.Use AWS Athena to perform SQL query to AWS CloudTrail S3 bucket to get the IAM user information. Generate a report based on the Athena query result.

Answer: B
Option A is incorrect because list-users only list limited information. It does not contain data such as MFA status.
Option B is CORRECT because users can download a new credential report every 4 hours, containing all the requirements asked.
Option C is incorrect because AWS Config cannot provide a document that lists all required data for IAM users.
Option D is incorrect because the solution would not be as efficient as compared to option B (using IAM credential report).
In AWS IAM console, users can generate a credential report which lists all IAM users and the status, including passwords, access keys, and MFA devices. 
For more information, kindly visit the URL provided below
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html.