TMA-IBMCLOUD-1.19
Ensure Inactive User Accounts are Suspend
설명
Revoke access privileges for users in an IBM Cloud account that are inactive, typically defined as user accounts with no logins in a given time frame. Users and other identities can become inactive for a number of reasons, for example, vacation, parental leave, new roles within the company, or sick leave for user identities. If an identity's access needs to be temporarily revoked, you can suspend the user in the account to prevent access.
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
Using Console: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access (IAM)`. 3. To view a list of inactive identities in the account, click Gain Insight, Inactive Identities 4. Click Update report to view the most recent report of inactive identities in your account 5. The list will also show the status for each user in the account. 6. To change a users' status, click on the Actions menu and select Remove name. 7. Under User details, select the desired status in the User status drop down. 8. Click Apply. To check the last time a user logged in, follow the steps to enable Activity Tracker with IBM Cloud Logs in recommendation Enable audit logging for IBM Cloud Identity and Access Management.
조치 방법
조치 방식: 가이드 또는 인프라 패치
Using Console: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access (IAM). 3. To view a list of users in the account, click Users. 4. The user list will also show the status for each user in the account. 5. To suspend a user, click on a user name. 6. Under User details, select Suspended in the User status drop down. 7. Click Apply.
속성
- 운영 체제
- 모두
- 태그
- cloudibmcloud
- 참고 자료
- CIS IBM Cloud Foundations Benchmark v2.0.0 - 1.19 Ensure Inactive User Accounts are Suspend