What should you use to audit the permissions of your users? What kind of info does that service give you?

IAM Credential Report. It gives you: Password usage and change dates. Activity/rotation status of access keys. Whether MFA is enabled.