AWS IAM
上線身份與存取AWS IAM 連接器——唯讀、無代理
Scans AWS IAM users, roles, groups, and policies to map effective permissions and find over-privileged or stale principals.
我們掃描的內容
- IAM users, roles, groups, and attached/inline policies (never resource data)
- Effective permission relationships for blast-radius analysis
唯讀監控——除非您開啟自動修復並單獨授予寫入存取權，否則 AWS IAM 資料中的任何內容都不會改變。
安全發現結果
每次 AWS IAM 掃描時會執行 13 個偵測規則。每個發現結果都附帶純文字說明、背後的證據和修復步驟。
- CRITICALMisconfig
AWS account root user has MFA disabled
- CRITICALMisconfig
AWS account root user has active access keys
- CRITICALPublic exposure
IAM role trust policy allows any principal to assume it
- HIGHMisconfig
IAM console user has no MFA device
- HIGHOver permission
IAM user holds a wildcard (Action:* Resource:*) policy
- HIGHOver permission
IAM user has AdministratorAccess attached
- MEDIUMStale access
IAM access key has not been rotated in over 90 days
- MEDIUMMisconfig
Account password policy allows short passwords
- LOWStale access
IAM console user has been inactive for over 90 days
- LOWMisconfig
Account password policy does not expire passwords
- LOWMisconfig
Account password policy allows password reuse
- LOWMisconfig
IAM user has an inline policy
- LOWMisconfig
IAM group has no members
如何連接 AWS IAM
步驟 1
登入 8200.dev 或建立帳戶
步驟 2
前往連接器 → AWS IAM
步驟 3
按一下「連接」並透過 AWS IAM 的同意畫面授權
步驟 4
8200.dev 自動掃描——結果在幾分鐘內出現
在幾分鐘內連接您的第一個來源——免費、唯讀、無銷售電話。