⭐ Repository → 💼 CIS AWS v6.0.0 → 💼 2 Identity and Access Management

💼 2.14 Ensure IAM users receive permissions only through groups (Automated)

• ID: /frameworks/cis-aws-v6.0.0/02/14

Description

IAM users are granted access to services, functions, and data through IAM policies. There are four ways to define policies for a user: 1) Edit the user policy directly, also known as an inline or user policy; 2) attach a policy directly to a user; 3) add the user to an IAM group that has an attached policy; 4) add the user to an IAM group that has an inline policy.

Only the third implementation is recommended.

Similar

• Sections
  • /frameworks/cis-aws-v5.0.0/01/14

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 CIS AWS v5.0.0 → 💼 1.14 Ensure IAM users receive permissions only through groups (Automated)			1		no data

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 CIS AWS v5.0.0 → 💼 1.14 Ensure IAM users receive permissions only through groups (Automated)			1		no data

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance

Policies (1)

Policy	Logic Count	Flags	Compliance
🛡️ AWS IAM User has inline or directly attached policies🟢	1	🟠 x1, 🟢 x5	no data