πΌ [SageMaker.3] Users should not have root access to SageMaker AI notebook instances
-
Contextual name: πΌ [SageMaker.3] Users should not have root access to SageMaker AI notebook instances
-
ID:
/frameworks/aws-fsbp-v1.0.0/sagemaker/03
-
Located in: πΌ SageMaker
Descriptionβ
In adherence to the principal of least privilege, it is a recommended security best practice to restrict root access to instance resources to avoid unintentionally over provisioning permissions.
Similarβ
- AWS Security Hub
- Internal
- ID:
dec-c-8d1156a3
- ID:
Similar Sections (Give Policies To)β
Section | Sub Sections | Internal Rules | Policies | Flags |
---|---|---|---|---|
πΌ NIST SP 800-53 Revision 5 β πΌ AC-2(1) Account Management _ Automated System Account Management | 4 | 16 | ||
πΌ NIST SP 800-53 Revision 5 β πΌ AC-3(7) Access Enforcement _ Role-based Access Control | 7 | |||
πΌ NIST SP 800-53 Revision 5 β πΌ AC-3(15) Access Enforcement _ Discretionary and Mandatory Access Control | 10 | |||
πΌ NIST SP 800-53 Revision 5 β πΌ AC-6 Least Privilege | 10 | 21 | 26 | |
πΌ NIST SP 800-53 Revision 5 β πΌ AC-6(2) Least Privilege _ Non-privileged Access for Nonsecurity Functions | 4 | 4 | ||
πΌ NIST SP 800-53 Revision 5 β πΌ AC-6(10) Least Privilege _ Prohibit Non-privileged Users from Executing Privileged Functions | 2 |
Sub Sectionsβ
Section | Sub Sections | Internal Rules | Policies | Flags |
---|