MEDIUM
Source
CloudSploit
ID
iam-group-changes

IAM Group Changes

Ensure an event rule is configured for IAM Group changes.

Monitoring changes to IAM groups like create, update and delete will help in identifying changes to satisfy least privilege principle.

Configure an event rule for IAM Group changes like create, update and delete.