Skip to main content

πŸ’Ό AC-6(5) Privileged Accounts (M)(H)

  • Contextual name: πŸ’Ό AC-6(5) Privileged Accounts (M)(H)
  • ID: /frameworks/fedramp-moderate-security-controls/ac/06/05
  • Located in: πŸ’Ό AC-6 Least Privilege (M)(H)

Description​

Restrict privileged accounts on the system to [Assignment: organization-defined personnel or roles].

Similar​

  • Sections
    • /frameworks/fedramp-high-security-controls/ac/06/05
  • Internal
    • ID: dec-c-e84263ed

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό FedRAMP High Security Controls β†’ πŸ’Ό AC-6(5) Privileged Accounts (M)(H)35

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (5)​

PolicyLogic CountFlags
πŸ“ AWS Account IAM Access Analyzer is not enabled for all regions 🟒1🟒 x6
πŸ“ AWS Account Root User credentials were used is the last 30 days πŸ”΄πŸŸ’1πŸ”΄ x1, 🟒 x6
πŸ“ AWS Account Root User has active access keys 🟒1🟒 x6
πŸ“ AWS IAM Policy allows full administrative privileges 🟒1🟒 x6
πŸ“ AWS IAM User with console and programmatic access set during the initial creation 🟒🟒 x3