IAM misconfigurations

Role with Unused Service Access

Risk Level

Informational (4)

Platform(s)
Compliance Frameworks

Description

Orca has detected that the IamRole was granted access to the following services, which they may not require. Policies should adhere to the Principle of Least Privilege. You can read more here: https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#grant-least-privilege
  • Recommended Mitigation

    Review the policy and consider revoking its access to any unused services.