Ensure IAM users with the same level of access are members of access groups and IAM policies are assigned only to access groups or Trusted Profiles

SedangLevel 1Tinjauan manualibmcloud

Deskripsi

Simplify and secure the access management process by using access groups or Trusted Profiles when you assign access to groups of users with identical access needs. You can create an access group or a Trusted Profile so that you can organize a set of users and service IDs into a single entity that makes it easy for you to assign access. You can assign a single policy to the group instead of assigning the same access multiple times for each individual user or service ID. Using access groups or Trusted Profiles reduces the number of policies that must be created and managed in the account and simplifies the process of adding new users or service IDs or modifying user and service IDs access.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Using Console: Audit user access policies: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access (IAM). 3. Click Users and select a user by clicking on the username. 4. Click Access Policies. ***If the user has individual access policies and you wish to remove them, complete the appropriate remediation steps.

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Using Console: Assign an access policy to an Access Group: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access(IAM). 3. Click Access Groups or Trusted Profiles 4. Click an Access Group or Trusted Profile name, then click the Access tab 5. Click Assign access. Add members to an Access Group or Trusted Profile: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access(IAM). 3. Click Access Groups or Trusted Profiles. 4. Click an Access Group or Trusted Profile name. 5. Click Add. Delete an access policy for a user: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access(IAM). 3. Click Users. 4. Click on a user name. 5. Click the Access tab 6. Locate the row containing the access policy you wish to remove. Click the actions icon corresponding to that row and click Remove.

Properti

Sistem operasi: Apa saja
Tag: access-controlcloudiamibmcloud
Referensi: CIS IBM Cloud Foundations Benchmark v2.0.0 - 1.14 Ensure IAM users with the same level of access are members of access groups and IAM policies are assigned only to access groups or Trusted Profiles