Control: 1.1 Avoid the use of the "root" account
Description
The "root" account has unrestricted access to all resources in the AWS account. It is highly recommended that the use of this account be avoided.
The "root" account is the most privileged AWS account. Minimizing the use of this account and adopting the principle of least privilege for access management will reduce the risk of accidental changes and unintended disclosure of highly privileged credentials.
Remediation
Follow the remediation instructions of the Ensure IAM policies are attached only to groups or roles recommendation.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.cis_v120_1_1Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.cis_v120_1_1 --shareSQL
This control uses a named query:
manual_control