AWS IAM policy attached to users misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_40
Category - Subcategory	IAM - Overly Permissive
Provider	AWS
Severity	LOW
Framework	CloudFormation, Serverless, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	2b7e07ba-56c8-42db-8db4-a4b65f5066c4

Impact

This rule identifies IAM policies attached to user. By default, IAM users, groups, and roles have no access to AWS resources. IAM policies are the means by which privileges are granted to users, groups, or roles. It is recommended that IAM policies be applied directly to groups but not users.

How to Fix

Resource: AWS::IAM::Policy

• Arguments: Properties.Users [source,go]

---

{ "Resources: ExamplePolicy: Type: 'AWS::IAM::Policy' Properties: ...

• Users:
• • example_user", }

---