Control: AWS > Well-Architected Tool > AWS Well-Architected Framework > Security > SEC 03. How do you manage permissions for people and machines?

Resource Types

This control targets the following resource types:

• AWS > Well-Architected Tool > AWS Well-Architected Framework

Policies

The following policies can be used to configure this control:

• AWS > Well-Architected Tool > AWS Well-Architected Framework > Security > SEC 03. How do you manage permissions for people and machines?

This control type relies on these other policies when running actions:

• AWS > Well-Architected Tool > AWS Well-Architected Framework > Security > SEC 03. How do you manage permissions for people and machines? > Define access requirements
• AWS > Well-Architected Tool > AWS Well-Architected Framework > Security > SEC 03. How do you manage permissions for people and machines? > Grant least privilege access
• AWS > Well-Architected Tool > AWS Well-Architected Framework > Security > SEC 03. How do you manage permissions for people and machines? > Establish emergency access process
• AWS > Well-Architected Tool > AWS Well-Architected Framework > Security > SEC 03. How do you manage permissions for people and machines? > Reduce permissions continuously
• AWS > Well-Architected Tool > AWS Well-Architected Framework > Security > SEC 03. How do you manage permissions for people and machines? > Define permission guardrails for your organization
• AWS > Well-Architected Tool > AWS Well-Architected Framework > Security > SEC 03. How do you manage permissions for people and machines? > Manage access based on life cycle
• AWS > Well-Architected Tool > AWS Well-Architected Framework > Security > SEC 03. How do you manage permissions for people and machines? > Analyze public and cross account access
• AWS > Well-Architected Tool > AWS Well-Architected Framework > Security > SEC 03. How do you manage permissions for people and machines? > Share resources securely

Category

• CMDB

In Your Workspace

• Controls by Resource report
• Controls by Control Type report

Developers

Control Type URI

tmod:@turbot/aws-wellarchitected-framework#/control/types/sec03

Category URI

tmod:@turbot/turbot#/control/categories/cmdb

GraphQL

query controlType(id: "tmod:@turbot/aws-wellarchitected-framework#/control/types/sec03") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-wellarchitected-framework#/control/types/sec03'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-wellarchitected-framework#/control/types/sec03"