Severity Framework
CCSS (Common Configuration Scoring System) is a set of measures used to determine the severity of the rule.
Snyk CCSS
Rule category
Each rule is associated with a high-level category. For example IAM, Container, Monitoring, Logging, Network, etc.
IAM/ Users
Is your environment affected by this misconfiguration?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsFrameworks
AWS-Well-ArchitectedCSA-CCMHIPAA
- Snyk IDSNYK-CC-00193
- creditSnyk Research Team
Description
Ensuring that a user belongs to at least one group helps prevent the user's permissions from being managed separately.
How to fix?
Attach the aws_iam_user to an aws_iam_group using either aws_iam_user_group_membership or aws_iam_group_membership.
Example Configuration
resource "aws_iam_user" "user" {
name = "example-user"
# other required fields here
}
resource "aws_iam_group" "group" {
name = "example-group"
# other required fields here
}
resource "aws_iam_group_membership" "membership" {
name = "example-membership"
users = [
aws_iam_user.user.name,
]
group = aws_iam_group.group.name
}