AWS IAM
AktifIdentitas & AksesKonektor AWS IAM — read-only, agentless
Scans AWS IAM users, roles, groups, and policies to map effective permissions and find over-privileged or stale principals.
Yang kami pindai
- IAM users, roles, groups, and attached/inline policies (never resource data)
- Effective permission relationships for blast-radius analysis
Pemantauan read-only — tidak ada yang dalam data AWS IAM Anda berubah kecuali Anda mengaktifkan auto-remediation dan memberikan akses tulis secara terpisah.
Temuan keamanan
13 aturan deteksi berjalan pada setiap pemindaian AWS IAM. Setiap temuan dilengkapi dengan penjelasan bahasa biasa, bukti di baliknya, dan langkah-langkah remediasi.
- CRITICALMisconfig
AWS account root user has MFA disabled
- CRITICALMisconfig
AWS account root user has active access keys
- CRITICALPublic exposure
IAM role trust policy allows any principal to assume it
- HIGHMisconfig
IAM console user has no MFA device
- HIGHOver permission
IAM user holds a wildcard (Action:* Resource:*) policy
- HIGHOver permission
IAM user has AdministratorAccess attached
- MEDIUMStale access
IAM access key has not been rotated in over 90 days
- MEDIUMMisconfig
Account password policy allows short passwords
- LOWStale access
IAM console user has been inactive for over 90 days
- LOWMisconfig
Account password policy does not expire passwords
- LOWMisconfig
Account password policy allows password reuse
- LOWMisconfig
IAM user has an inline policy
- LOWMisconfig
IAM group has no members
Cara menghubungkan AWS IAM
Langkah 1
Daftar atau masuk ke 8200.dev
Langkah 2
Buka Konektor → AWS IAM
Langkah 3
Klik Hubungkan dan otorisasi melalui layar persetujuan AWS IAM
Langkah 4
8200.dev memindai secara otomatis — hasil muncul dalam beberapa menit
Hubungkan sumber pertama Anda dalam beberapa menit — gratis, read-only, tanpa panggilan penjualan.