Skip to main content

💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached - Level 1 (Automated)

  • Contextual name: 💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached - Level 1 (Automated)
  • ID: /frameworks/cis-aws-v3.0.0/01/16
  • Located in: 💼 1 Identity and Access Management

Description

IAM policies are the means by which privileges are granted to users, groups, or roles. It is recommended and considered a standard security advice to grant least privilege -that is, granting only the permissions required to perform a task. Determine what users need to do and then craft policies for them that let the users perform only those tasks, instead of allowing full administrative privileges.

Similar

  • Sections
    • /frameworks/cis-aws-v4.0.0/01/16
    • /frameworks/cis-aws-v2.0.0/01/16
  • Internal
    • ID: dec-c-c8b4f62d

Similar Sections (Take Policies From)

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS AWS v2.0.0 → 💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached - Level 1 (Automated)1
💼 CIS AWS v4.0.0 → 💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached (Automated)1

Similar Sections (Give Policies To)

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS AWS v2.0.0 → 💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached - Level 1 (Automated)1
💼 CIS AWS v4.0.0 → 💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached (Automated)1

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)

PolicyLogic CountFlags
📝 AWS IAM Policy allows full administrative privileges 🟢1🟢 x6