IAM Access Analyzer should be enabled in all active regions

문서 > Datadog 보안 > OOTB Rules > IAM Access Analyzer should be enabled in all active regions

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Description

Enable IAM Access Analyzer for IAM policies across all resources in each AWS region. IAM Access Analyzer provides visibility into which resources are accessible from outside your account, helping ensure that permissions adhere to the principle of least privilege. Introduced at AWS re:Invent 2019, it analyzes policies attached to resources, such as KMS keys and IAM roles, to identify unintended external access.

IAM Access Analyzer assists in identifying resources shared with external entities, allowing you to detect and mitigate unintended data access. It monitors policies for various services (including S3 buckets, IAM roles, KMS keys, AWS Lambda functions, and Amazon SQS queues) using logic-based reasoning to analyze resource-based policies.

Remediation

For instructions on enabling IAM Access Analyzer, refer to Getting Started with IAM Access Analyzer.