Panther low experimental python

AWS IAM Policy Assigned to User

This policy validates that there are no IAM policies assigned directly to users. Best practice suggests assigning to an IAM group and placing users within that group.

View Source

Detection Logic

def policy(resource):
    return resource["InlinePolicies"] is None and resource["ManagedPolicyNames"] is None

Field Validations

Loading…

Comments (0)

Loading comments...