Benchmark: D3.PC.Am.B.16

Description

Administrative, physical, or technical controls are in place to prevent users without administrative responsibilities from installing unauthorized software.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-aws-compliance

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select D3.PC.Am.B.16.

Run this benchmark in your terminal:

powerpipe benchmark run aws_compliance.benchmark.ffiec_d_3_pc_am_b_16

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run aws_compliance.benchmark.ffiec_d_3_pc_am_b_16 --share

Controls

Ensure IAM policy should not grant full access to service
IAM groups should have at least one user
IAM policy should not have statements with admin access
IAM users should be in at least one group

Benchmark: D3.PC.Am.B.16

Description

Usage

Controls

Tags