how to search for AWS non-active users with active secret keys?

[englab]

I would like to search for AWS non-active users, who have not logged in or using their Access Key ID for more than 60 days, but have active Access Key ID. I am very new to Splunk. Please help. Thanks.