MEDIUM
Source
CloudSploit
ID
user-changes

User Changes

Ensure an event rule is configured for User changes.

Monitoring changes to users and their states and capabilities will help in identifying changes to the security posture.

Configure an event rule for changes to users and their states and capabilities.