Benchmark: AC-6(10) Prohibit Non-Privileged Users From Executing Privileged Functions
Description
The information system prevents non-privileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-aws-complianceStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select AC-6(10) Prohibit Non-Privileged Users From Executing Privileged Functions.
Run this benchmark in your terminal:
powerpipe benchmark run aws_compliance.benchmark.fedramp_moderate_rev_4_ac_6_10Snapshot and share results via Turbot Pipes:
powerpipe benchmark run aws_compliance.benchmark.fedramp_moderate_rev_4_ac_6_10 --shareControls
- Ensure IAM policy should not grant full access to service
- IAM policy should not have statements with admin access
- IAM root user should not have access keys