turbot/aws_compliance
Loading controls...

Control: 1.1 Avoid the use of the "root" account

Description

The "root" account has unrestricted access to all resources in the AWS account. It is highly recommended that the use of this account be avoided.

The "root" account is the most privileged AWS account. Minimizing the use of this account and adopting the principle of least privilege for access management will reduce the risk of accidental changes and unintended disclosure of highly privileged credentials.

Remediation

Follow the remediation instructions of the Ensure IAM policies are attached only to groups or roles recommendation.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.cis_v120_1_1

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.cis_v120_1_1 --share

SQL

This control uses a named query:

manual_control

Tags