TMA-IBMCLOUD-1.14
Ensure IAM users with the same level of access are members of access groups and IAM policies are assigned only to access groups or Trusted Profiles
Descripción
Simplify and secure the access management process by using access groups or Trusted Profiles when you assign access to groups of users with identical access needs. You can create an access group or a Trusted Profile so that you can organize a set of users and service IDs into a single entity that makes it easy for you to assign access. You can assign a single policy to the group instead of assigning the same access multiple times for each individual user or service ID. Using access groups or Trusted Profiles reduces the number of policies that must be created and managed in the account and simplifies the process of adding new users or service IDs or modifying user and service IDs access.
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
Using Console: Audit user access policies: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access (IAM). 3. Click Users and select a user by clicking on the username. 4. Click Access Policies. ***If the user has individual access policies and you wish to remove them, complete the appropriate remediation steps.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Using Console: Assign an access policy to an Access Group: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access(IAM). 3. Click Access Groups or Trusted Profiles 4. Click an Access Group or Trusted Profile name, then click the Access tab 5. Click Assign access. Add members to an Access Group or Trusted Profile: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access(IAM). 3. Click Access Groups or Trusted Profiles. 4. Click an Access Group or Trusted Profile name. 5. Click Add. Delete an access policy for a user: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access(IAM). 3. Click Users. 4. Click on a user name. 5. Click the Access tab 6. Locate the row containing the access policy you wish to remove. Click the actions icon corresponding to that row and click Remove.
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- access-controlcloudiamibmcloud
- Referencia
- CIS IBM Cloud Foundations Benchmark v2.0.0 - 1.14 Ensure IAM users with the same level of access are members of access groups and IAM policies are assigned only to access groups or Trusted Profiles