Skip to main content

πŸ’Ό AC-6(5) Privileged Accounts (M)(H)

  • Contextual name: πŸ’Ό AC-6(5) Privileged Accounts (M)(H)
  • ID: /frameworks/fedramp-high-security-controls/ac/06/05
  • Located in: πŸ’Ό AC-6 Least Privilege (M)(H)

Description​

Restrict privileged accounts on the system to [Assignment: organization-defined personnel or roles].

Similar​

  • Sections
    • /frameworks/nist-sp-800-53-r5/ac/06/05
  • Internal
    • ID: dec-c-e84263ed

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST SP 800-53 Revision 5 β†’ πŸ’Ό AC-6(5) Least Privilege _ Privileged Accounts33

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό FedRAMP Moderate Security Controls β†’ πŸ’Ό AC-6(5) Privileged Accounts (M)(H)5

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (5)​

PolicyLogic CountFlags
πŸ“ AWS Account IAM Access Analyzer is not enabled for all regions 🟒1🟒 x6
πŸ“ AWS Account Root User credentials were used is the last 30 days πŸ”΄πŸŸ’1πŸ”΄ x1, 🟒 x6
πŸ“ AWS Account Root User has active access keys 🟒1🟒 x6
πŸ“ AWS IAM Policy allows full administrative privileges 🟒1🟒 x6
πŸ“ AWS IAM User with console and programmatic access set during the initial creation 🟒🟒 x3

Internal Rules​

RulePoliciesFlags
βœ‰οΈ dec-x-157aa4b91
βœ‰οΈ dec-x-ab7fc52e1
βœ‰οΈ dec-x-e58fd8e01