Rule purpose: Check whether CAM has granted specific high-risk permissions.
Compliance evaluation logic: When no CAM users, user groups, or roles are granted specific high-risk permissions, the evaluation result is "compliant".
Rule Identifier: cam-user-risky-policy-bound.
Risk Level: Low
Applicable resource type: QCS::CAM::User, QCS::CAM::Group, QCS::CAM::Role.
Rule trigger type: Periodic execution, every 24 hours.
Keyword: User, user group, role, policy.
Rule parameter:
|
policies | AdministratorAcces | Contains |