Prevasio | AWS IAM — Security issues

Username
My account Support
Sign out
Global
IAM does not require region selection
US East (N. Virginia) us-east-1 US East (Ohio) us-east-2 US West (N. California) us-west-1 US West (Oregon) us-west-2
Africa (Cape Town) af-south-1
Asia Pacific (Hong Kong) ap-east-1 Asia Pacific (Hyderabad) ap-south-2 Asia Pacific (Jakarta) ap-southeast-3 Asia Pacific (Mumbai) ap-south-1 Asia Pacific (Osaka) ap-northeast-3 Asia Pacific (Seoul) ap-northeast-2 Asia Pacific (Singapore) ap-southeast-1 Asia Pacific (Sydney) ap-southeast-2 Asia Pacific (Tokyo) ap-northeast-1
Canada (Central) ca-central-1
Europe (Frankfurt) eu-central-1 Europe (Ireland) eu-west-1 Europe (London) eu-west-2 Europe (Milan) eu-south-1 Europe (Paris) eu-west-3 Europe (Spain) eu-south-2 Europe (Stockholm) eu-north-1 Europe (Zurich) eu-central-2
Middle East (Bahrain) me-south-1 Middle East (UAE) me-central-1
South America (São Paulo) sa-east-1

AWS-QuickSetup-StackSet-Local-ExecutionRole

Overview

Critical

0

High

1

Medium

0

Low

1

Informational

0

Security issues (2)

Severity	Non-Compliance	Issue	Remediation	Read more	Action
High	—	IAM role "AWS-QuickSetup-StackSet-Local-ExecutionRole" must require either MFA or an external ID to designate who can assume the role. The role's misconfigured account is: "arn:aws:iam::531239714189:role/AWS-QuickSetup-StackSet-Local-AdministrationRole".	Update the IAM role, making sure it uses either MFA or an external ID to designate who can assume the role.	More info
Low	—	IAM role "AWS-QuickSetup-StackSet-Local-ExecutionRole" contains managed AdministratorAccess policy.	Consider tightening the IAM role policies by granting them least privilege and avoid the wildcards, if possible.	More info