MEDIUM
Source
CloudSploit
ID
iam-user-without-permissions

IAM User Without Permissions

Ensure that no IAM user exists without any permissions.

IAM users are created to perform any Console, CLI or API based operations on AWS cloud accounts. They are associated with policies that grant them permissions to perform required operations. An IAM user without any permission is a security risk, it is recommended to either add required permissions or delete them to adhere to compliance standards.

Modify IAM user and attach new permissions or delete the user.