diff --git a/packages/aws-cdk-lib/aws-iam/lib/access-key.ts b/packages/aws-cdk-lib/aws-iam/lib/access-key.ts
index 7904225107984..de96c3ac9e5ae 100644
--- a/packages/aws-cdk-lib/aws-iam/lib/access-key.ts
+++ b/packages/aws-cdk-lib/aws-iam/lib/access-key.ts
@@ -18,6 +18,11 @@ export enum AccessKeyStatus {
    * An inactive access key. An inactive key cannot be used to make API calls.
    */
   INACTIVE = 'Inactive',
+
+  /**
+   * An expired access key. 
+   */
+  EXPIRED = 'Expired',
 }
 
 /**