Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
AWS
Loading policies...

Policy: AWS > CIS v2.0 > 1 - Identity and Access Management > 1.01 - Maintain current contact details

Configures auditing against a CIS Benchmark item.

Level: 1

Ensure contact email and telephone details for AWS accounts are current and map to more than one individual in your organization.

An AWS account supports a number of contact details, and AWS will use these to contact the account owner if activity judged to be in breach of Acceptable Use Policy or indicative of likely security compromise is observed by the AWS Abuse team. Contact details should not be for a single individual, as circumstances may arise where that individual is unavailable. Email contact details should point to a mail alias which forwards email to multiple individuals within the organization; where feasible, phone contact details should point to a PABX hunt group or other call-forwarding system.

Targets

This policy targets the following resource types:

  • AWS > Account

Primary Policy

This policy is used with the following primary policy:

  • AWS > CIS v2.0 > 1 - Identity and Access Management

Related Policies

  • Attestation

Controls

Setting this policy configures this control:

  • AWS > CIS v2.0 > 1 - Identity and Access Management > 1.01 - Maintain current contact details

Policy Specification

Schema Type
string
Default
Per AWS > CIS v2.0 > 1 - Identity and Access Management
Valid Values [YAML]
  • Per AWS > CIS v2.0 > 1 - Identity and Access Management
    
  • Skip
    
  • Check: Benchmark using attestation
    

Category

  • CIS > Controls v7 > 19 Incident Response and Management > 19.03 Designate Management Personnel to Support Incident Handling

In Your Workspace

  • Policy Settings by Type report

Developers

    Category URI
    • tmod:@turbot/cis#/control/categories/v071903
  • Policy Type URI
    • tmod:@turbot/aws-cisv2-0#/policy/types/r0101
  • GraphQL
    • query policyType(id: "tmod:@turbot/aws-cisv2-0#/policy/types/r0101") { … }
    • query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-cisv2-0#/policy/types/r0101'") { … }
    • query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-cisv2-0#/policy/types/r0101'") { … }
  • CLI
    • Get Policy Type
    • turbot graphql policy-type --id "tmod:@turbot/aws-cisv2-0#/policy/types/r0101"
    • Get Policy Settings
    • turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-cisv2-0#/policy/types/r0101"
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
180
Mods
497
Resource Types
8,691
Policies
3,362
Controls
1,833
Quick Actions
540
IAM