Skip to content

Commit

Permalink
fix(metadata): change ResourceType Type for AWS Inline Policy Check (#…
Browse files Browse the repository at this point in the history
  • Loading branch information
gabrielsoltz authored and sergargar committed Apr 1, 2024
1 parent f972eae commit 5447a60
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "high",
"ResourceType": "AwsIamPolicy",
"ResourceType": "AwsIamRole",
"Description": "Ensure inline policies that allow full \"*:*\" administrative privileges are not associated to IAM identities",
"Risk": "IAM policies are the means by which privileges are granted to users, groups or roles. It is recommended and considered a standard security advice to grant least privilege—that is; granting only the permissions required to perform a task. Determine what users need to do and then craft policies for them that let the users perform only those tasks instead of allowing full administrative privileges. Providing full administrative privileges instead of restricting to the minimum set of permissions that the user is required to do exposes the resources to potentially unwanted actions.",
"RelatedUrl": "",
Expand Down

0 comments on commit 5447a60

Please sign in to comment.