Skip to main content

💼 1.20 Ensure IAM users are managed centrally via identity federation or AWS Organizations for multi-account environments (Manual)

  • Contextual name: 💼 1.20 Ensure IAM users are managed centrally via identity federation or AWS Organizations for multi-account environments (Manual)
  • ID: /frameworks/cis-aws-v5.0.0/01/20
  • Located in: 💼 1 Identity and Access Management

Description

In multi-account environments, IAM user centralization facilitates greater user control. User access beyond the initial account is then provided via role assumption. Centralization of users can be accomplished through federation with an external identity provider or through the use of AWS Organizations.

Similar

  • Sections
    • /frameworks/cis-aws-v4.0.1/01/21

Similar Sections (Take Policies From)

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS AWS v4.0.1 → 💼 1.21 Ensure IAM users are managed centrally via identity federation or AWS Organizations for multi-account environments (Manual)1

Similar Sections (Give Policies To)

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS AWS v4.0.1 → 💼 1.21 Ensure IAM users are managed centrally via identity federation or AWS Organizations for multi-account environments (Manual)1

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)

PolicyLogic CountFlags
📝 AWS IAM User is not managed centrally in multi-account environments 🟢🟢 x3