Rule: Ensure a support role for managing incidents with AWS Support
This rule ensures creating a support role for efficient incident management with AWS Support.
| Rule | Ensure a support role has been created to manage incidents with AWS Support |
| Framework | General Data Protection Regulation (GDPR) |
| Severity | ✔ Low |
Rule Description
To comply with the General Data Protection Regulation (GDPR) requirements, it is essential to have a dedicated support role assigned for managing incidents with AWS Support. This support role will handle any incidents related to GDPR and ensure that appropriate actions are taken to address them promptly.
Troubleshooting Steps
If you encounter any issues or need assistance with GDPR-related incidents, follow these troubleshooting steps:
- 1.
Verify Existing Roles: Ensure that you have sufficient access and permissions to manage roles in your AWS account.
- 2.
Check AWS Support subscription: Confirm that you have an active AWS Support subscription with the appropriate plan that includes access to GDPR support.
- 3.
Verify existing support roles: Double-check if there is already a support role assigned specifically for GDPR incidents.
- 4.
Create a new support role: If no dedicated support role exists for GDPR incidents, proceed with creating a new one.
Necessary Codes
AWS CLI Command to create a support role:
aws iam create-role --role-name GDPRSupportRole --assume-role-policy-document file://trust-policy.json
Note: Replace
GDPRSupportRoleTrust Policy Document (trust-policy.json):
{
"Version":"2012-10-17",
"Statement":[
{
"Sid":"",
"Effect":"Allow",
"Principal":{
"Service":"support.amazonaws.com"
},
"Action":"sts:AssumeRole"
}
]
}
Step-by-Step Guide for Remediation
Follow these steps to create a support role for managing GDPR incidents:
- 1.
Open the AWS Management Console and navigate to the IAM service.
- 2.
Click on "Roles" in the left-hand menu.
- 3.
Click on the "Create Role" button.
- 4.
Select the "Another AWS account" option.
- 5.
Enter "support.amazonaws.com" as the Account ID.
- 6.
Enable the checkbox for "Require external ID" and input the external ID provided by AWS Support.
- 7.
Click "Next: Permissions" to proceed.
- 8.
Attach the necessary permissions that the support role should have. These permissions should be based on the specific requirements for managing GDPR incidents. Ensure that these permissions align with the principle of least privilege.
- 9.
Click "Next: Tags" to proceed (optional).
- 10.
Add any necessary tags for the support role (optional).
- 11.
Click "Next: Review" once all the required permissions and tags are configured.
- 12.
Provide a suitable name for the role, such as
.GDPRSupportRole - 13.
Optionally, add a description for the role to provide more context.
- 14.
Review the configuration and click "Create Role" to finalize the creation of the support role.
- 15.
Validate that the role has been successfully created and assigned the necessary permissions.
Conclusion
By following the steps outlined above, you will ensure that a dedicated support role exists for managing incidents related to GDPR within your AWS account. This helps to meet regulatory compliance requirements and enables efficient handling of any GDPR incidents that may arise.