IAM User Admins
Ensures the number of IAM admins in the account are minimized
While at least two IAM admin users should be configured, the total number of admins should be kept to a minimum.
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
-
Log in to the AWS Management Console.
-
Select the “Services” option and search for IAM.
-
In the left navigation panel, select “Users” under “Access management”.
-
Click on the User name of the IAM user that you want to inspect.
-
Scroll down and click the “Permissions” tab and check if the user has “AdministratorAccess” under Policy name then the user has administrator privileges.
-
Ensure that the user is authorised for administrative operations. If not then remove “AdministratorAccess” permission by clicking on the cross(x) on the extreme right column.
-
On the Detach Policy pop up click on “Detach” button to detach the AdministratorAccess policy from the user.
-
Repeat steps 4-7 for all other IAM users. There should be minimal number of users with AdministratorAccess policy.