AWS IAM
AktifIdentiti & AksesKonektor AWS IAM — read-only, agentless
Scans AWS IAM users, roles, groups, and policies to map effective permissions and find over-privileged or stale principals.
Apa yang kami pindai
- IAM users, roles, groups, and attached/inline policies (never resource data)
- Effective permission relationships for blast-radius analysis
Pemantauan read-only — tidak ada yang dalam data AWS IAM Anda berubah kecuali Anda mengaktifkan auto-remediation dan memberikan akses tulis secara terpisah.
Temuan keamanan
13 aturan deteksi berjalan pada setiap pemindaian AWS IAM. Setiap temuan dilengkapi dengan penjelasan dalam bahasa biasa, bukti di baliknya dan langkah remediasi.
- CRITICALMisconfig
AWS account root user has MFA disabled
- CRITICALMisconfig
AWS account root user has active access keys
- CRITICALPublic exposure
IAM role trust policy allows any principal to assume it
- HIGHMisconfig
IAM console user has no MFA device
- HIGHOver permission
IAM user holds a wildcard (Action:* Resource:*) policy
- HIGHOver permission
IAM user has AdministratorAccess attached
- MEDIUMStale access
IAM access key has not been rotated in over 90 days
- MEDIUMMisconfig
Account password policy allows short passwords
- LOWStale access
IAM console user has been inactive for over 90 days
- LOWMisconfig
Account password policy does not expire passwords
- LOWMisconfig
Account password policy allows password reuse
- LOWMisconfig
IAM user has an inline policy
- LOWMisconfig
IAM group has no members
Cara menghubungkan AWS IAM
Langkah 1
Daftar atau masuk ke 8200.dev
Langkah 2
Buka Konektor → AWS IAM
Langkah 3
Klik Hubungkan dan otorisasi melalui layar persetujuan AWS IAM
Langkah 4
8200.dev memindai secara otomatis — hasil muncul dalam hitungan menit
Hubungkan sumber pertama Anda dalam hitungan menit — gratis, read-only, tanpa panggilan penjualan.