πΌ 1.22 Ensure IAM policies that allow full ":" administrative privileges are not created
- ID:
/frameworks/cis-aws-v1.2.0/01/22
Descriptionβ
IAM policies are the means by which privileges are granted to users, groups, or roles. It is recommended and considered a standard security advice to grant least privilegeβthat is, granting only the permissions required to perform a task. Determine what users need to do and then craft policies for them that let the users perform only those tasks, instead of allowing full administrative privileges.
Similarβ
- Sections
/frameworks/cis-aws-v1.3.0/01/16
- Internal
Similar Sections (Take Policies From)β
Similar Sections (Give Policies To)β
Sub Sectionsβ
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)β
Internal Rulesβ
| Rule | Policies | Flags |
|---|
| βοΈ dec-x-157aa4b9 | 1 | |