IAM misconfigurations

RAM policy with full administrative privileges

Platform(s)
Compliance Frameworks

Description

A RAM Policy is an object in Alibaba Cloud that, when attached to a RAM identity (a user, group, or role), defines its permissions. It was detected that the custom RAM policy {AliCloudRamPolicy} grants full administrative privileges. These privileges grant the attached RAM identities the ability to perform all actions on any resource in the account.
Need help?

Get a free Security Risk Assessment. Start today

Orca Security Demo Demo the Orca Platform-> In just 10 minutes, you’ll see how Orca Security can revolutionize your cloud security strategy. Watch a recorded demo from a cloud security expert now.