Risk Level: Low
Cloud Entity: AWS Managed Policy
CloudGuard Rule ID: D9.CFT.IAM.18
Covered by Spectral: No
Category: Security, Identity, & Compliance
AWS_IAM_ManagedPolicy should not have Users
Users property. Attach the policy to a role or a group instead.
AWS managed policies are designed to provide permissions for many common use cases. Full access AWS managed policies such as AmazonDynamoDBFullAccess and IAMFullAccess define permissions for service administrators by granting full access to a service. Power-user AWS managed policies such as AWSCodeCommitPowerUser and AWSKeyManagementServicePowerUser are designed for power users. Partial-access AWS managed policies such as AmazonMobileAnalyticsWriteOnlyAccess and AmazonEC2ReadOnlyAccess provide specific levels of access to AWS services without allowing permissions management access level permissions. AWS managed policies make it easier for you to assign appropriate permissions to users, groups, and roles than if you had to write the policies yourself.
- AWS CloudFormation ruleset
Updated 3 months ago