Benchmark: Access Control (AC)
Description
The access control family consists of security requirements detailing system logging. This includes who has access to what assets and reporting capabilities like account management, system privileges, and remote access logging to determine when users have access to the system and their level of access.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-aws-compliance
Start the Powerpipe server:
steampipe service startpowerpipe server
Open http://localhost:9033 in your browser and select Access Control (AC).
Run this benchmark in your terminal:
powerpipe benchmark run aws_compliance.benchmark.nist_800_53_rev_5_ac
Snapshot and share results via Turbot Pipes:
powerpipe benchmark run aws_compliance.benchmark.nist_800_53_rev_5_ac --share
Benchmarks
- Account Management (AC-2)
- Access Enforcement (AC-3)
- Information Flow Enforcement (AC-4)
- Separation Of Duties (AC-5)
- Least Privilege (AC-6)
- Unsuccessful Logon Attempts (AC-7)
- Security And Privacy Attributes (AC-16)
- Remote Access (AC-17)
- Access Control Decisions (AC-24)