Ensure no root account access key exists

高等級 1人工審核alibaba

說明

Access keys provide programmatic access to a given Alibaba Cloud account. It is recommended that all access keys associated with the root account be removed. An Alibaba Cloud account can be viewed as a "root" account. The root account has the highest privilege of an Alibaba Cloud account. Removing access keys associated with the root account limits the opportunity that the ... Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Perform the following to determine if the root account has access keys: Using the management console: 1. Logon to Resource Access Management (RAM) console https://ram.console.aliyun.com/overview by using your Alibaba Cloud account (root account). 2. In the left-side navigation pane, click Overview. 3. In the Security Check section, make sure that No AK for Root Account is marked as Finished.

修補方式

修補方法: 操作指南或基礎設施修補檔

Perform the following to delete or disable active root access keys: Using the management console 1. Logon to RAM console by using your Alibaba Cloud account (root account). 2. Move the pointer over the account icon in the upper-right corner and click AccessKey. 3. Click Continue to manage AccessKey. 4. On the Security Management page, find the target access keys and perform the following operations: Click Disable to disable the target access keys temporarily. Click Delete to delete the target access keys permanently.

屬性

作業系統: 不限
標籤: alibabaram
參考資料: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 1.2 Ensure no root account access key exists