Skip to main content

⭐ Repository → 💼 CIS AWS v6.0.0 → 💼 2 Identity and Access Management

💼 2.15 Ensure IAM policies that allow full ":" administrative privileges are not attached (Automated)

  • ID: /frameworks/cis-aws-v6.0.0/02/15

Description​

IAM policies are the means by which privileges are granted to users, groups, or roles. It is recommended and considered standard security advice to grant least privilege—that is, granting only the permissions required to perform a task. Determine what users need to do, and then craft policies for them that allow the users to perform only those tasks, instead of granting full administrative privileges.

Similar​

  • Sections
    • /frameworks/cis-aws-v5.0.0/01/15

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS AWS v5.0.0 → 💼 1.15 Ensure IAM policies that allow full ":" administrative privileges are not attached (Automated)1no data

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS AWS v5.0.0 → 💼 1.15 Ensure IAM policies that allow full ":" administrative privileges are not attached (Automated)1no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (1)​

PolicyLogic CountFlagsCompliance
🛡️ AWS IAM Policy allows full administrative privileges🟢1🟢 x6no data