TMA-IBMCLOUD-1.14
Ensure IAM users with the same level of access are members of access groups and IAM policies are assigned only to access groups or Trusted Profiles
Opis
Simplify and secure the access management process by using access groups or Trusted Profiles when you assign access to groups of users with identical access needs. You can create an access group or a Trusted Profile so that you can organize a set of users and service IDs into a single entity that makes it easy for you to assign access. You can assign a single policy to the group instead of assigning the same access multiple times for each individual user or service ID. Using access groups or Trusted Profiles reduces the number of policies that must be created and managed in the account and simplifies the process of adding new users or service IDs or modifying user and service IDs access.
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
Using Console: Audit user access policies: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access (IAM). 3. Click Users and select a user by clicking on the username. 4. Click Access Policies. ***If the user has individual access policies and you wish to remove them, complete the appropriate remediation steps.
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Using Console: Assign an access policy to an Access Group: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access(IAM). 3. Click Access Groups or Trusted Profiles 4. Click an Access Group or Trusted Profile name, then click the Access tab 5. Click Assign access. Add members to an Access Group or Trusted Profile: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access(IAM). 3. Click Access Groups or Trusted Profiles. 4. Click an Access Group or Trusted Profile name. 5. Click Add. Delete an access policy for a user: 1. Log in to IBM Cloud at https://cloud.ibm.com. 2. From the Menu bar, click Manage, Access(IAM). 3. Click Users. 4. Click on a user name. 5. Click the Access tab 6. Locate the row containing the access policy you wish to remove. Click the actions icon corresponding to that row and click Remove.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- access-controlcloudiamibmcloud
- Referenca
- CIS IBM Cloud Foundations Benchmark v2.0.0 - 1.14 Ensure IAM users with the same level of access are members of access groups and IAM policies are assigned only to access groups or Trusted Profiles