IAM Groups Rule: Ensure at Least One User

IAM Group User Requirement for GxP 21 CFR Part 11 Compliance

Description:

Troubleshooting Steps:

2. 1.
   Check IAM Group Configuration: Verify the configuration of IAM groups to ensure that at least one user is associated with each group.
4. 2.
   Review User Assignments: Review the assigned users for each IAM group to identify any missing or unassigned groups.
6. 3.
   Audit Logs: Analyze the audit logs or access history to determine if any groups have been left without users.

Remediation Steps:

2. 1.
   Identify Unassigned Groups: Identify the IAM groups that do not have any users assigned.
4. 2.
   Assign Users to Groups: Select a suitable user to assign to each of the unassigned groups. This can be an existing user or a new user created specifically for this purpose.
6. 3.
   Access Management Console: Access the IAM management console or use the appropriate CLI commands to manage IAM groups and users.
8. 4.
   Locate the Group: Search for the unassigned group by its name or unique identifier.
10. 5.
    Assign User: Navigate to the group's settings and select the option to add or assign a user.
12. 6.
    Select User: Choose the appropriate user from the available list or create a new user if necessary.
14. 7.
    Review and Confirm: Double-check the selection and click on the confirm button to assign the user to the group.
16. 8.
    Repeat for Other Groups: Repeat steps 4-7 for all other unassigned groups identified in step 1.

Recommended CLI Commands (if applicable):

2. 1.
   To list all IAM groups:

aws iam list-groups

2. 1.
   To get details of a specific IAM group:

aws iam get-group --group-name <group-name>

2. 1.
   To add a user to an IAM group:

aws iam add-user-to-group --user-name <user-name> --group-name <group-name>

2. 1.
   To create a new IAM user:

aws iam create-user --user-name <user-name>

<group-name>

<user-name>