Skip to main content

💼 1.14 Ensure IAM users receive permissions only through groups (Automated)

  • Contextual name: 💼 1.14 Ensure IAM users receive permissions only through groups (Automated)
  • ID: /frameworks/cis-aws-v5.0.0/01/14
  • Located in: 💼 1 Identity and Access Management

Description​

IAM users are granted access to services, functions, and data through IAM policies. There are four ways to define policies for a user: 1) Edit the user policy directly, also known as an inline or user policy; 2) attach a policy directly to a user; 3) add the user to an IAM group that has an attached policy; 4) add the user to an IAM group that has an inline policy.

Only the third implementation is recommended.

Similar​

  • Sections
    • /frameworks/cis-aws-v4.0.1/01/15

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS AWS v4.0.1 → 💼 1.15 Ensure IAM users receive permissions only through groups (Automated)1

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS AWS v4.0.1 → 💼 1.15 Ensure IAM users receive permissions only through groups (Automated)1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)​

PolicyLogic CountFlags
📝 AWS IAM User has inline or directly attached policies 🟢1🟠 x1, 🟢 x5