Skip to main content

πŸ’Ό 8.2 Privileged access rights

  • Contextual name: πŸ’Ό 8.2 Privileged access rights
  • ID: /frameworks/iso-iec-27001-2022/08/02
  • Located in: πŸ’Ό 8 Technological controls

Description​

The allocation and use of privileged access rights shall be restricted and managed.

Similar​

  • Internal
    • ID: dec-c-6071d426

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (7)​

PolicyLogic CountFlags
πŸ“ AWS Account Root User credentials were used is the last 30 days πŸ”΄πŸŸ’1πŸ”΄ x1, 🟒 x6
πŸ“ AWS Account Root User has active access keys 🟒1🟒 x6
πŸ“ AWS EC2 Instance IAM role is not attached 🟒1🟒 x6
πŸ“ AWS IAM User has inline or directly attached policies 🟒1🟠 x1, 🟒 x5
πŸ“ AWS IAM User MFA is not enabled for all users with console password 🟒1🟒 x6
πŸ“ AWS IAM User with console and programmatic access set during the initial creation 🟒🟒 x3
πŸ“ AWS S3 Bucket MFA Delete is not enabled 🟠🟒1🟠 x1, 🟒 x6

Internal Rules​

RulePoliciesFlags
βœ‰οΈ dec-x-0a7801fb1
βœ‰οΈ dec-x-6c93750d1
βœ‰οΈ dec-x-4157c58a1
βœ‰οΈ dec-x-b10e98af1
βœ‰οΈ dec-x-b92b08f41
βœ‰οΈ dec-x-e58fd8e01
βœ‰οΈ dec-z-bb7312921