Control: AWS > CIS v1.4 > 1 - Identity and Access Management > 1.15 - Ensure IAM Users Receive Permissions Only Through Groups (Automated)
Configures auditing against a CIS Benchmark item.
Level: 1 (Scored)
IAM users are granted access to services, functions, and data through IAM policies. There are three ways to define policies for a user:
- Edit the user policy directly, aka an inline, or user, policy;
- attach a policy directly to a user;
- add the user to an IAM group that has an attached policy.
Only the third implementation is recommended.
Resource Types
This control targets the following resource types:
Primary Policies
The following policies can be used to configure this control:
Category
In Your Workspace
Developers
- tmod:@turbot/aws-cisv1-4#/control/types/r0115
- tmod:@turbot/cis#/control/categories/v0716
- turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-cisv1-4#/control/types/r0115"
Get Controls
Control Type URI
Category URI
GraphQL
CLI