Excessive user permissions to a BitBucket repository

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_96
Category	IAM
Severity	HIGH

Impact

A user with 'write' permissions to a repository who has not performed any actions requiring write permissions for more than 90 days, may not require these permissions. This poses a threat, as attackers who gain control of a user account can access the repository which the user potentially should not have 'write' permissions to (as they are not active in the repository), thereby enlarging the surface of the attack.