AWS IAM Audit - Security Checks

Checks Performed

• AWS Account Should Have A Minimum Number of Admins
• AWS Account Should Not Have Too Many Admins
• Blacklisted IAM Policies Should Be Check
• Blacklisted IAM Policies Should Be Check
• Blacklisted IAM Policies Should Be Checked
• Blocked KMS Actions In IAM Policies Should Be Set
• Blocked KMS Actions In Inline Policies Should Be Set
• Blocked KMS Actions In Inline Policies Should Be Set
• Blocked KMS Actions In Inline Policies Should Be Set
• Certificates Should Not Be Tied With Root Account
• Complex Password Policy Should Be Present
• ELB Certificates Should Be Rotated
• Groups Without Users Should Be Removed
• IAM Managed Policies Should Be Attached To IAM Role
• Inactive Roles Should Be Removed
• Inactive User Account Access keys Should Be Dropped
• MFA Should Be Enabled On User Accounts
• Role Service Should Be Active
• Roles Should Have MFA and External ID Set
• Roles Should Not Have Permissions With Inline Policies
• Root Account Access Keys Should Be Rotated
• Root Account Activity Should Be Monitored
• Root Account Certificates Should Be Rotated
• Root Account Password Should Be Rotated
• Root Account Should Have MFA
• Root Account Should Not Have Access Keys
• Root User Password Should Be Rotated
• User Account Access keys Should Be Rotated
• User Account Certificates Should Be Rotated
• User Account Service Should Have Activity
• User Account Should Not Have Multiple Access Keys
• User Account Without Any Usage Should Be Removed
• User Console Access Should Not Be Inactive
• Users Should Not Have Permissions With Inline Policies