💼 AC-2(1) Automated System Account Management (M)(H)

• Contextual name: 💼 AC-2(1) Automated System Account Management (M)(H)
• ID: /frameworks/fedramp-moderate-security-controls/ac/02/01
• Located in: 💼 AC-2 Account Management (L)(M)(H)

Description

Support the management of system accounts using [Assignment: organization-defined automated mechanisms].

Similar

• Sections
  • /frameworks/fedramp-high-security-controls/ac/02/01
• Internal
  • ID: dec-c-3dc09811

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 FedRAMP High Security Controls → 💼 AC-2(1) Automated System Account Management (M)(H)			16

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (16)

Policy	Logic Count	Flags
📝 AWS Account IAM Password Policy minimum password length is 14 characters or less 🟢	1	🟢 x6
📝 AWS Account IAM Password Policy Number of passwords to remember is not set to 24 🟢	1	🟢 x6
📝 AWS Account Root User has active access keys 🟢	1	🟢 x6
📝 AWS Account Root User Hardware MFA is not enabled. 🟢		🟢 x3
📝 AWS IAM Policy allows full administrative privileges 🟢	1	🟢 x6
📝 AWS IAM User Access Keys are not rotated every 90 days or less 🟢	1	🟢 x6
📝 AWS IAM User has inline or directly attached policies 🟢	1	🟠 x1, 🟢 x5
📝 AWS IAM User MFA is not enabled for all users with console password 🟢	1	🟢 x6
📝 AWS IAM User with credentials unused for 45 days or more is not disabled 🟢	1	🟢 x6
📝 Azure App Service is not registered with Microsoft Entra ID 🟢	1	🟢 x6
📝 Azure Non-RBAC Key Vault stores Keys without expiration date 🟢	1	🟢 x6
📝 Azure Non-RBAC Key Vault stores Secrets without expiration date 🟢	1	🟢 x6
📝 Azure RBAC Key Vault stores Keys without expiration date 🟢	1	🟢 x6
📝 Azure RBAC Key Vault stores Secrets without expiration date 🟢	1	🟢 x6
📝 Azure SQL Database Transparent Data Encryption is not enabled 🟢	1	🟢 x6
📝 Azure SQL Server Microsoft Entra authentication is not configured 🟢	1	🟢 x6