IAM Policy with No Admin Access Statement Rule

Rule / Policy Description:

Troubleshooting Steps:

2. 1.
   Identify the policy statement(s) granting admin access for HIPAA resources.
4. 2.
   Verify if the policy statement is necessary for legitimate business reasons or if it can be modified to provide more restricted access.
6. 3.
   If the policy statement is found to be unauthorized or unnecessary, proceed with remediation steps.

Necessary Code:

Remediation Steps:

2. 1.
   Identify the IAM policy associated with the HIPAA resources that includes admin access.
4. 2.
   Open the IAM console or use the AWS CLI (Command Line Interface) to access the IAM policy.
6. 3.
   Remove the statement(s) granting admin access for HIPAA resources.
8. 4.
   Validate the changes made to the policy to ensure no unintended access restrictions have been introduced.
10. 5.
    Monitor the affected resources and user activity to confirm that the appropriate access control has been implemented.
12. 6.
    Document the changes made to the policy for future reference and auditing purposes.

Amazon Web Services (AWS) - IAM Console Steps:

2. 1.
   Sign in to the AWS Management Console.
4. 2.
   Navigate to the IAM service.
6. 3.
   Select "Policies" from the left sidebar menu.
8. 4.
   Locate the policy associated with HIPAA resources.
10. 5.
    Click on the policy name to open its details.
12. 6.
    Review the policy statements and identify the one(s) granting admin access.
14. 7.
    Click on the "Edit policy" button.
16. 8.
    Remove the admin access statement(s) as required.
18. 9.
    Validate and save the policy changes.

Amazon Web Services (AWS) - CLI Steps:

2. 1.

   Install and configure the AWS CLI, if not already done.

4. 2.

   Open a terminal or command prompt.

6. 3.

   Run the following command to retrieve the policy document for the associated HIPAA IAM policy:

   aws iam get-policy-version --policy-arn arn:aws:iam::Aws_account_id:policy/PolicyName --version-id v1
   

   Replace

   Aws_account_id

   and

   PolicyName

   with the actual values.

8. 4.

   Identify the policy statement(s) granting admin access in the retrieved policy document.

10. 5.

    Remove the admin access statement(s) from the policy document.

12. 6.

    Run the following command to update the policy:

    aws iam create-policy-version --policy-arn arn:aws:iam::Aws_account_id:policy/PolicyName --policy-document file:///path/to/modified_policy.json --set-as-default
    

    Replace

    Aws_account_id

    ,

    PolicyName

    , and

    /path/to/modified_policy.json

    with the actual values.

14. 7.

    Validate the updated policy using the AWS CLI or IAM console.

16. 8.

    Monitor the related resources and user activity to ensure the desired access restrictions are in place.

Note: