Skip to main content

💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached

  • ID: /frameworks/cis-aws-v1.3.0/01/16

Stats​

not available

Description​

IAM policies are the means by which privileges are granted to users, groups, or roles. It is recommended and considered a standard security advice to grant least privilege -that is, granting only the permissions required to perform a task. Determine what users need to do and then craft policies for them that let the users perform only those tasks, instead of allowing full administrative privileges.

Similar​

  • Sections
    • /frameworks/cis-aws-v1.4.0/01/16
    • /frameworks/cis-aws-v1.2.0/01/22
  • Internal
    • ID: dec-c-d01d309d

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS AWS v1.2.0 → 💼 1.22 Ensure IAM policies that allow full ":" administrative privileges are not created11no data
💼 CIS AWS v1.4.0 → 💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached1no data

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS AWS v1.2.0 → 💼 1.22 Ensure IAM policies that allow full ":" administrative privileges are not created11no data
💼 CIS AWS v1.4.0 → 💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached1no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (1)​

PolicyLogic CountFlagsCompliance
🛡️ AWS IAM Policy allows full administrative privileges🟢1🟢 x6no data

Internal Rules​

RulePoliciesFlags
✉️ dec-x-157aa4b91