cis-aws-foundations-2.1.6
Ensure delegated admins manage AWS Organizations-integrated services
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure delegated admins manage AWS Organizations-integrated services
Ensure multi-factor authentication (MFA) is enabled for all IAM users that have a console password
Ensure credentials unused for 45 days or more are disabled
Ensure access keys are rotated every 90 days or less
Ensure IAM policies that allow full "*:*" administrative privileges are not attached
Ensure a support role has been created to manage incidents with AWS Support
Ensure IAM instance roles are used for AWS resource access from instances
Ensure that all expired SSL/TLS certificates stored in AWS IAM are removed
Ensure that IAM External Access Analyzer is enabled for all regions
Ensure IAM users are managed centrally via identity federation or AWS Organizations for multi-account environments