IAM policies should be attached and managed at the group level

문서 > Datadog 보안 > OOTB Rules > IAM policies should be attached and managed at the group level

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Description

By default, IAM users, groups, and roles have no access to AWS resources. IAM policies are the mechanism through which privileges are granted. Datadog recommends that you apply IAM policies directly to groups, not to individual users or roles.

Assigning IAM policies through groups unifies permissions management to a single, flexible layer that aligns with organizational functional roles. This approach reduces the likelihood of granting excessive permissions and simplifies the management of user privileges.

Remediation

For instructions on properly applying IAM policies to groups, refer to Managed policies and inline policies.