📝 AWS Account Alternate Contact Information is not current 🔴🟢

• Contextual name: 📝 Alternate Contact Information is not current 🔴🟢
• ID: /ce/ca/aws/account/maintain-alternate-contact-information
• Located in: 📁 AWS Account

Flags

• 🟢 Impossible policy
• 🟢 Policy with categories
• 🔴 Policy with todo.md
• 🟢 Policy with type

Our Metadata

• Policy Type: COMPLIANCE_POLICY
• Policy Category:
  • RELIABILITY

Similar Policies

• Internal
  • dec-x-a7b7e35e

Similar Internal Rules

Rule	Policies	Flags
✉️ dec-x-a7b7e35e	1

TODO 🔴

Open File

TODO

• Investigate if this policy is actually possible to implement
• Check whether this API can be used https://docs.aws.amazon.com/accounts/latest/reference/API_GetContactInformation.html

Description

Open File

Description

AWS provides customers with the option of specifying the contact information for account's security team. It is recommended that this information be provided.

Rationale

Specifying security-specific contact information will help ensure that security advisories sent by AWS reach the team in your organization that is best equipped to respond to them.

Audit

Perform the following to determine if security contact information is present:

From Console

1. Click on your account name at the top right corner of the console.
2. From the drop-down menu Click My Account.
3. Scroll down to the Alternate Contacts section.
4. Ensure contact information is specified in the Security section.

From Command Line

1. Run the following command:

aws account get-alternate-contact --alternate-contact-type SECURITY

2. Ensure proper contact information is specified for the Security contact.

References

1. CCE-79200-2

Remediation

Open File

Remediation

Perform the following to establish security contact information:

From Console

1. Click on your account name at the top right corner of the console.
2. From the drop-down menu Click My Account.
3. Scroll down to the Alternate Contacts section.
4. Enter contact information in the Security section.

From Command Line

Run the following command with the following input parameters: --email-address, --name, and --phone-number.

aws account put-alternate-contact --alternate-contact-type SECURITY

Note: Consider specifying an internal email distribution list to ensure emails are regularly monitored by more than one individual.

policy.yaml

Open File

Linked Framework Sections

Section	Sub Sections	Internal Rules	Policies	Flags
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [Account.1] Security contact information should be provided for an AWS account		1	1
💼 CIS AWS v1.2.0 → 💼 1.18 Ensure security contact information is registered			1
💼 CIS AWS v1.3.0 → 💼 1.2 Ensure security contact information is registered			1
💼 CIS AWS v1.4.0 → 💼 1.2 Ensure security contact information is registered			1
💼 CIS AWS v1.5.0 → 💼 1.2 Ensure security contact information is registered - Level 1 (Manual)			1
💼 CIS AWS v2.0.0 → 💼 1.2 Ensure security contact information is registered - Level 1 (Manual)			1
💼 CIS AWS v3.0.0 → 💼 1.2 Ensure security contact information is registered - Level 1 (Manual)			1
💼 CIS AWS v4.0.0 → 💼 1.2 Ensure security contact information is registered (Manual)			1
💼 CIS AWS v4.0.1 → 💼 1.2 Ensure security contact information is registered (Manual)			1
💼 CIS AWS v5.0.0 → 💼 1.2 Ensure security contact information is registered (Manual)			1
💼 Cloudaware Framework → 💼 Infrastructure Modernization			12
💼 FedRAMP High Security Controls → 💼 CM-2 Baseline Configuration (L)(M)(H)	3	1	24
💼 FedRAMP High Security Controls → 💼 CM-2(2) Automation Support for Accuracy and Currency (M)(H)			14
💼 FedRAMP Low Security Controls → 💼 CM-2 Baseline Configuration (L)(M)(H)			23
💼 FedRAMP Moderate Security Controls → 💼 CM-2 Baseline Configuration (L)(M)(H)	3		24
💼 FedRAMP Moderate Security Controls → 💼 CM-2(2) Automation Support for Accuracy and Currency (M)(H)			14
💼 NIST SP 800-53 Revision 5 → 💼 CM-2 Baseline Configuration	7		23
💼 NIST SP 800-53 Revision 5 → 💼 CM-2(2) Baseline Configuration _ Automation Support for Accuracy and Currency			14