IAM principal has no permissions boundary Affecting IAM service in AWS

Severity Framework Snyk CCSS

Rule category IAM / Access Control

Is your enviroment affected by this misconfiguration?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Frameworks

Description

AWS permissions boundaries limit the maximum permissions that an identity-based policy can grant to an IAM entity.

Set the permissions_boundary attribute of aws_iam_role or aws_iam_user to the ARN of an IAM policy.

resource "aws_iam_user" "valid-user-1" {
  name = "valid-user-1"
  
  permissions_boundary = "<iam-policy-arn>"
  # other required fields here
}

resource "aws_iam_role" "valid-role-1" {
  name = "valid-role-1"
  
  permissions_boundary = "<iam-policy-arn>"
  # other required fields here
}