Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add policy pack - Remediation policy to disable IAM user console access #885

Open
rajlearner17 opened this issue Nov 7, 2024 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@rajlearner17
Copy link
Contributor

Control objective
A clear and concise description of what the control objective is and why it's important.

Remediation
The remediation action(s) to satisfy the control objective.

This is achievable using the direct policy - https://hub.guardrails.turbot.com/mods/aws/policies/aws-iam/userLoginProfile
If you set the policy to "Enforce: Delete login profile", the Console access will be disabled for the IAM user(s). This does not affect the root user.

Categories
Proposed primary category and categories from the available list of categories.

Additional context
Add any other context about the problem here.

The policy worked as intended. However, it errored with message which seems to be transient error:

Action error (action update): tmod:@turbot/aws-iam#/action/types/userDeleteLoginProfile: Login Profile for User turbottest-user cannot be modified while login profile is being created.

Steps to recreate:

  • Set the policy to "Enforce: Delete login profile".
  • Enable the console login for an existing IAM user.
  • When I re-ran the control after a little bit, it worked as expected.
@rajlearner17 rajlearner17 added the enhancement New feature or request label Nov 7, 2024
@rajlearner17 rajlearner17 self-assigned this Nov 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant