Details
-
Task
-
Resolution: Declined
-
Major - P3
-
None
-
None
-
None
Description
As part of our assessment for AWS access management side of things, IA learned that AWS has a “root login” account that is a direct login account which is not tied to SSO and since it non SSO, IA would like to see the listing of users who have root login access and the controls in place around access deprovisioning when employee is terminated.
This listing we need would be for the AWS account that we run Atlas infrastructure on and the root login account for it.