Skip to main content

πŸ’Ό 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached - Level 1 (Automated)

  • Contextual name: πŸ’Ό 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached - Level 1 (Automated)
  • ID: /frameworks/cis-aws-v2.0.0/01/16
  • Located in: πŸ’Ό 1 Identity and Access Management

Description​

IAM policies are the means by which privileges are granted to users, groups, or roles. It is recommended and considered a standard security advice to grant least privilege - that is, granting only the permissions required to perform a task. Determine what users need to do and then craft policies for them that let the users perform only those tasks, instead of allowing full administrative privileges.

Similar​

  • Sections
    • /frameworks/cis-aws-v3.0.0/01/16
    • /frameworks/cis-aws-v1.5.0/01/16
  • Internal
    • ID: dec-c-6d4e66c2

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό CIS AWS v1.5.0 β†’ πŸ’Ό 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached - Level 1 (Automated)1
πŸ’Ό CIS AWS v3.0.0 β†’ πŸ’Ό 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached - Level 1 (Automated)1

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό CIS AWS v1.5.0 β†’ πŸ’Ό 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached - Level 1 (Automated)1
πŸ’Ό CIS AWS v3.0.0 β†’ πŸ’Ό 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached - Level 1 (Automated)1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)​

PolicyLogic CountFlags
πŸ“ AWS IAM Policy allows full administrative privileges 🟒1🟒 x6