IAM Role Policies

Quick Info


Plugin Title	IAM Role Policies
Cloud	AWS
Category	IAM
Description	Ensures IAM role policies are properly scoped with specific permissions
More Info	Policies attached to IAM roles should be scoped to least-privileged access and avoid the use of wildcards.
AWS Link	https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html
Recommended Action	Ensure that all IAM roles are scoped to specific services and API calls.

Detailed Remediation Steps

Cloud Security Posture Management (CSPM)

Scan, monitor and remediate configuration issues in public cloud accounts according to best practices and compliance standards, across AWS, Azure, Google Cloud, and Oracle Cloud.

Cloud native security as-a-service

Aqua Wave

Get Started

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.