During a cloud security audit, the team discovers that developer IAM accounts have AdministratorAccess policies attached directly. Several developers have recently left the organization, but their accounts have not been deprovisioned. What are the two most critical security remediation actions?

Question

Accepted Answer

A. Remove AdministratorAccess and apply least-privilege role-based policies; immediately disable or delete all former employee accounts. The two critical risks are overly broad permissions (AdministratorAccess for developers violates least privilege) and former employee accounts with active cloud access (immediate deprovisioning prevents unauthorized access). The CompTIA Cloud+ V4 Security domain covers IAM and vulnerability management as security objectives.

During a cloud security audit, the team discovers that developer IAM accounts have AdministratorAccess policies attached directly. Several developers have recently left the organization, but their accounts have not been deprovisioned. What are the two most critical security remediation actions?

Related Questions

Discussion