Skip to main content

💼 1.21 Ensure IAM users are managed centrally via identity federation or AWS Organizations for multi-account environments

  • Contextual name: 💼 1.21 Ensure IAM users are managed centrally via identity federation or AWS Organizations for multi-account environments
  • ID: /frameworks/cis-aws-v1.4.0/01/21
  • Located in: 💼 1 Identity and Access Management

Description​

In multi-account environments, IAM user centralization facilitates greater user control. User access beyond the initial account is then provided via role assumption. Centralization of users can be accomplished through federation with an external identity provider or through the use of AWS Organizations.

Similar​

  • Sections
    • /frameworks/cis-aws-v1.5.0/01/21
    • /frameworks/cis-aws-v1.3.0/01/22
  • Internal
    • ID: dec-c-94f50347

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS AWS v1.3.0 → 💼 1.22 Ensure IAM users are managed centrally via identity federation or AWS Organizations for multi-account environments1
💼 CIS AWS v1.5.0 → 💼 1.21 Ensure IAM users are managed centrally via identity federation or AWS Organizations for multi-account environments - Level 2 (Manual)1

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS AWS v1.3.0 → 💼 1.22 Ensure IAM users are managed centrally via identity federation or AWS Organizations for multi-account environments1
💼 CIS AWS v1.5.0 → 💼 1.21 Ensure IAM users are managed centrally via identity federation or AWS Organizations for multi-account environments - Level 2 (Manual)1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)​

PolicyLogic CountFlags
📝 AWS IAM User is not managed centrally in multi-account environments 🟢🟢 x3