Skip to main content

💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached (Automated)

  • Contextual name: 💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached (Automated)
  • ID: /frameworks/cis-aws-v4.0.0/01/16
  • Located in: 💼 1 Identity and Access Management

Description​

IAM policies are the means by which privileges are granted to users, groups, or roles. It is recommended and considered standard security advice to grant least privilege—that is, granting only the permissions required to perform a task. Determine what users need to do, and then craft policies for them that allow the users to perform only those tasks, instead of granting full administrative privileges.

Similar​

  • Sections
    • /frameworks/cis-aws-v4.0.1/01/16
    • /frameworks/cis-aws-v3.0.0/01/16

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS AWS v3.0.0 → 💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached - Level 1 (Automated)1
💼 CIS AWS v4.0.1 → 💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached (Automated)1

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS AWS v3.0.0 → 💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached - Level 1 (Automated)1
💼 CIS AWS v4.0.1 → 💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached (Automated)1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)​

PolicyLogic CountFlags
📝 AWS IAM Policy allows full administrative privileges 🟢1🟢 x6