TMA-ALIBABA-1.2
Ensure no root account access key exists
Description
Access keys provide programmatic access to a given Alibaba Cloud account. It is recommended that all access keys associated with the root account be removed. An Alibaba Cloud account can be viewed as a "root" account. The root account has the highest privilege of an Alibaba Cloud account. Removing access keys associated with the root account limits the opportunity that the ... Reported as a manual review item: the benchmark audit needs console review or organisational judgement.
Méthode de vérification
Méthode d'audit: Revue manuelle
Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.
Perform the following to determine if the root account has access keys: Using the management console: 1. Logon to Resource Access Management (RAM) console https://ram.console.aliyun.com/overview by using your Alibaba Cloud account (root account). 2. In the left-side navigation pane, click Overview. 3. In the Security Check section, make sure that No AK for Root Account is marked as Finished.
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
Perform the following to delete or disable active root access keys: Using the management console 1. Logon to RAM console by using your Alibaba Cloud account (root account). 2. Move the pointer over the account icon in the upper-right corner and click AccessKey. 3. Click Continue to manage AccessKey. 4. On the Security Management page, find the target access keys and perform the following operations: Click Disable to disable the target access keys temporarily. Click Delete to delete the target access keys permanently.
Propriétés
- Systèmes d'exploitation
- Tous
- Étiquettes
- alibabaram
- Référence
- CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 1.2 Ensure no root account access key exists