Skip to main content

💼 General Access Controls

  • ID: /frameworks/cloudaware/identity-and-access-governance/general-access-controls

Description​

Policies for identifying and managing general permissions for resource access.

Similar​

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (11)​

PolicyLogic CountFlagsCompliance
🛡️ AWS CloudTrail IAM Policy Changes Monitoring is not enabled🟢⚪🟢 x2, ⚪ x1no data
🛡️ AWS IAM AWSCloudShellFullAccess Policy is attached🟢1🟢 x6no data
🛡️ AWS IAM Policy allows full administrative privileges🟢1🟢 x6no data
🛡️ Azure Subscription Leaving Microsoft Entra ID Directory and Subscription Entering Microsoft Entra ID Directory is not set to Permit No One🟢⚪🟢 x2, ⚪ x1no data
🛡️ Google Organization Essential Contacts is not configured🟢1🟢 x6no data
🛡️ Microsoft Entra ID Conditional Access By Location is not defined🟢⚪🟢 x2, ⚪ x1no data
🛡️ Microsoft Entra ID Default User Role can create tenants🟢1🟢 x6no data
🛡️ Microsoft Entra ID Device Code Authentication Flow is not restricted🟢⚪🟢 x2, ⚪ x1no data
🛡️ Microsoft Entra ID Named Locations are not defined🟢⚪🟢 x2, ⚪ x1no data
🛡️ Microsoft Entra ID Remember MFA devices setting is disabled🟢⚪🟢 x2, ⚪ x1no data
🛡️ Microsoft Entra ID Security Defaults are not enabled🟢⚪🟢 x2, ⚪ x1no data