💼 8.2.2 Group, shared, or generic accounts, or other shared authentication credentials are only used when necessary on an exception basis.

• ID: /frameworks/pci-dss-v4.0/08/02/02

Description

Manage as follows:

• Account use is prevented unless needed for an exceptional circumstance.
• Use is limited to the time needed for the exceptional circumstance.
• Business justification for use is documented.
• Use is explicitly approved by management.
• Individual user identity is confirmed before access to an account is granted.
• Every action taken is attributable to an individual user.

Similar

• Sections
  • /frameworks/pci-dss-v3.2.1/08/05
  • /frameworks/pci-dss-v4.0.1/08/02/02
• Internal
  • ID: dec-c-788a34c6

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 PCI DSS v3.2.1 → 💼 8.5 Do not use group, shared, or generic IDs, passwords, or other authentication methods.	1	1	2		no data
💼 PCI DSS v4.0.1 → 💼 8.2.2 Group, shared, or generic accounts, or other shared authentication credentials are only used when necessary on an exception basis.			2		no data

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 PCI DSS v3.2.1 → 💼 8.5 Do not use group, shared, or generic IDs, passwords, or other authentication methods.	1	1	2		no data
💼 PCI DSS v4.0.1 → 💼 8.2.2 Group, shared, or generic accounts, or other shared authentication credentials are only used when necessary on an exception basis.			2		no data

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance

Policies (2)

Policy	Logic Count	Flags	Compliance
🛡️ AWS Account Root User credentials were used is the last 30 days🟢	1	🟢 x6	no data
🛡️ AWS Account Root User has active access keys🟢	1	🟢 x6	no data

Internal Rules

Rule	Policies	Flags
✉️ dec-x-0a7801fb	1
✉️ dec-x-e58fd8e0	1