aws_compliance

AWS Compliance

Ensure IAM Roles do not have ReadOnlyAccess access for external AWS account. The AWS-managed ReadOnlyAccess policy carries a high risk of potential data leakage, posing a significant threat to customer security and privacy.

iam_role_cross_account_read_only_access_policy

all_controls_iam

IAM roles should not have read only access for external AWS accounts

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, FFIEC, PCI, NIST, HIPAA, RBI CSF, GDPR, SOC 2, Audit Manager Control Tower, FedRAMP, GxP and AWS Foundational Security Best Practices controls across all your AWS accounts using Powerpipe and Steampipe.

Control: IAM roles should not have read only access for external AWS accounts

Description

Usage

SQL

Tags