AWS IAM

सुरक्षा निष्कर्ष

13 पहचान नियम हर AWS IAM स्कैन पर चलते हैं। प्रत्येक खोज एक सादे-भाषा व्याख्या, इसके पीछे सबूत और उपचार चरणों के साथ आता है।

• CRITICALMisconfig

  AWS account root user has MFA disabled

• CRITICALMisconfig

  AWS account root user has active access keys

• CRITICALPublic exposure

  IAM role trust policy allows any principal to assume it

• HIGHMisconfig

  IAM console user has no MFA device

• HIGHOver permission

  IAM user holds a wildcard (Action:* Resource:*) policy

• HIGHOver permission

  IAM user has AdministratorAccess attached

• MEDIUMStale access

  IAM access key has not been rotated in over 90 days

• MEDIUMMisconfig

  Account password policy allows short passwords

• LOWStale access

  IAM console user has been inactive for over 90 days

• LOWMisconfig

  Account password policy does not expire passwords

• LOWMisconfig

  Account password policy allows password reuse

• LOWMisconfig

  IAM user has an inline policy

• LOWMisconfig

  IAM group has no members