Skip to main content

RAM User No Specified Policy

ID: rule:aliyun:ram-user-no-has-specified-policy
Severity: medium

Description

Ensures RAM users do not have specified risky policies attached.

Reason for Violation

Risky policies increase the attack surface.

Recommendation

Remove or replace risky policies with least privilege alternatives.

Resource Types

  • ALIYUN::RAM::User