Skip to main content

💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached (Automated)

  • ID: /frameworks/cis-aws-v4.0.1/01/16

Description

IAM policies are the means by which privileges are granted to users, groups, or roles. It is recommended and considered standard security advice to grant least privilege—that is, granting only the permissions required to perform a task. Determine what users need to do, and then craft policies for them that allow the users to perform only those tasks, instead of granting full administrative privileges.

Similar

  • Sections
    • /frameworks/cis-aws-v5.0.0/01/15
    • /frameworks/cis-aws-v4.0.0/01/16

Similar Sections (Take Policies From)

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS AWS v4.0.0 → 💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached (Automated)1no data
💼 CIS AWS v5.0.0 → 💼 1.15 Ensure IAM policies that allow full ":" administrative privileges are not attached (Automated)1no data

Similar Sections (Give Policies To)

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS AWS v4.0.0 → 💼 1.16 Ensure IAM policies that allow full ":" administrative privileges are not attached (Automated)1no data
💼 CIS AWS v5.0.0 → 💼 1.15 Ensure IAM policies that allow full ":" administrative privileges are not attached (Automated)1no data

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (1)

PolicyLogic CountFlagsCompliance
🛡️ AWS IAM Policy allows full administrative privileges🟢1🟢 x6no data