⭐ Repository → 💼 CIS AWS v6.0.0 → 💼 2 Identity and Access Management

💼 2.21 Ensure access to AWSCloudShellFullAccess is restricted (Manual)

• ID: /frameworks/cis-aws-v6.0.0/02/21

Description

AWS CloudShell is a convenient way of running CLI commands against AWS services; a managed IAM policy ('AWSCloudShellFullAccess') provides full access to CloudShell, which allows file upload and download capability between a user's local system and the CloudShell environment. Within the CloudShell environment, a user has sudo permissions and can access the internet. Therefore, it is feasible to install file transfer software, for example, and move data from CloudShell to external internet servers.

Similar

• Sections
  • /frameworks/cis-aws-v5.0.0/01/21

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 CIS AWS v5.0.0 → 💼 1.21 Ensure access to AWSCloudShellFullAccess is restricted (Manual)			1		no data

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 CIS AWS v5.0.0 → 💼 1.21 Ensure access to AWSCloudShellFullAccess is restricted (Manual)			1		no data

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance

Policies (1)

Policy	Logic Count	Flags	Compliance
🛡️ AWS IAM AWSCloudShellFullAccess Policy is attached🟢	1	🟢 x6	no data