10110010011101001011001101101110101018200.devFrom Enterprise.Systems
AWS IAM logo

AWS IAM

LiveIdentity & Access

AWS IAM connector — read-only, agentless

Scans AWS IAM users, roles, groups, and policies to map effective permissions and find over-privileged or stale principals.

Ano ang aming siniscan

  • IAM users, roles, groups, and attached/inline policies (never resource data)
  • Effective permission relationships for blast-radius analysis

Read-only na pagsubaybay — walang pagbabago sa iyong AWS IAM data maliban kung bubuksan mo ang auto-remediation at magbigay ng write access nang hiwalay.

Security findings

13 detection rules ay tumatakbo sa bawat AWS IAM scan. Bawat finding ay may kasamang plain-language explanation, ang evidence sa likod nito at mga hakbang sa remediation.

  • CRITICALMisconfig

    AWS account root user has MFA disabled

  • CRITICALMisconfig

    AWS account root user has active access keys

  • CRITICALPublic exposure

    IAM role trust policy allows any principal to assume it

  • HIGHMisconfig

    IAM console user has no MFA device

  • HIGHOver permission

    IAM user holds a wildcard (Action:* Resource:*) policy

  • HIGHOver permission

    IAM user has AdministratorAccess attached

  • MEDIUMStale access

    IAM access key has not been rotated in over 90 days

  • MEDIUMMisconfig

    Account password policy allows short passwords

  • LOWStale access

    IAM console user has been inactive for over 90 days

  • LOWMisconfig

    Account password policy does not expire passwords

  • LOWMisconfig

    Account password policy allows password reuse

  • LOWMisconfig

    IAM user has an inline policy

  • LOWMisconfig

    IAM group has no members

Paano ikonekta ang AWS IAM

  1. Hakbang 1

    Mag-sign up o mag-log in sa 8200.dev

  2. Hakbang 2

    Pumunta sa Connectors → AWS IAM

  3. Hakbang 3

    I-click ang Connect at mag-authorize sa pamamagitan ng AWS IAM's consent screen

  4. Hakbang 4

    Ang 8200.dev ay nag-scan nang automatic — ang mga resulta ay lilitaw sa loob ng ilang minuto

Ikonekta ang iyong unang source sa loob ng ilang minuto — libre, read-only, walang sales call.