top of page
AWS Foundational Security Best Practice
IAM.2
IAM users should not have IAM policies attached
Severity
Cloud Platforms
Resources
LOW
AWS
AWS Identity and Access Management
This AWS control checks that none of your IAM users have policies attached. Instead; IAM users must inherit permissions from IAM groups or roles.
bottom of page