IAM.1 IAM policies should not allow full *" administrative privileges"

2 min

follow aws least privilege principle grant only necessary permissions, avoid wildcard ( ) in iam policies click https //us east 1 console aws amazon com/securityhub/home?region=us east 1#/standards/cis aws foundations benchmark 1 4 0/iam 1 to go to security hub control iam 1 verify the checks that failed click on the failed resource delete or update resource