IAM Policies

Ensure there are no secrets in Lambda functions code
Description: Secrets Manager enables you to replace hardcoded credentials in your code, including passwords, with an API call to Secrets Manager to retriev...
Fri, 24 Mar, 2023 at 6:59 AM
Ensure EBS Default Encryption is activated
Description: EBS is a cloud-based storage service provided by AWS, which work like hard drives or Volumes. It stores any type of data, including file syste...
Mon, 10 Apr, 2023 at 5:16 AM
Ensure there are no obsolete Lambda runtimes
Description: Lambda is a compute service that lets you run code without provisioning or managing servers. Lambda runs your function only when needed and sc...
Wed, 29 Mar, 2023 at 1:34 AM
Ensure S3 buckets have object versioning enabled
Description: S3 Object Versioning can be used to protect from unintended overwrites and deletions. Versioning helps to keep multiple variants of an object ...
Tue, 8 Mar, 2022 at 2:22 AM
Ensure IAM Access Analyzer is enabled and its findings
Description:  AWS IAM Access Analyzer helps you identify the resources in your organization and accounts, such as Amazon S3 buckets or IAM roles, that are ...
Fri, 4 Mar, 2022 at 5:32 AM
Ensure there are no empty IAM Groups
Description: You know that a user group is a collection of users. You can use user groups to specify permissions for a collection of users, which can make ...
Fri, 24 Mar, 2023 at 7:54 AM
Ensure IAM users have Hardware MFA enabled
Description: The HTTPS protocol uses the SSL protocol to establish secure connections over the HTTP layer. You can also use the SSL protocol to establish s...
Fri, 21 Jul, 2023 at 5:04 AM
Check if IAM users have two active access keys
Description: Access keys consist of an access key ID and secret access key, which are used to sign in into AWS. AWS users need their access keys to make AP...
Fri, 21 Jul, 2023 at 5:01 AM
Ensure IAM Blacklisted Policies Check
Description: You manage access in AWS by creating policies and attaching them to IAM identities (users, groups of users, or roles) or AWS resources. A poli...
Fri, 24 Mar, 2023 at 6:52 AM
Ensure No Inline IAM Policies Allowed
Description: An inline policy is a policy that's embedded in an IAM identity (a user, group, or role). That is, the policy is an inherent part of the i...
Mon, 20 Mar, 2023 at 8:46 AM