Control: 1.17 Ensure Inactive User Accounts are Suspend
Description
Revoke access privileges for users in an IBM Cloud account that are inactive, typically defined as user accounts with no logins in a given time frame.
Remediation
From Console
- Log in to IBM Cloud
- From the Menu bar, click Manage > Access (IAM).
- To view a list of users in the account, click Users.
- The user list will also show the status for each user in the account.
- To suspend a user, click on a user name.
- Under User details, select Suspended in the User status drop down.
- Click Apply.
Usage
Run the control in your terminal:
powerpipe control run ibm_compliance.control.cis_v100_1_17Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run ibm_compliance.control.cis_v100_1_17 --shareSQL
This control uses a named query:
select guid as resource, 'info' as status, 'Manual verification required.' as reason, guidfrom ibm_account;