Detective Control Pillar Links
Logging & Monitoring
Pillar #2 Detective Control
| IAM Topic | Documentation |
|---|---|
| Change Root User Password | Change Root password AWS |
| AWS Root User Guide | AWS Root Documentation |
| Start with Root User | Two steps to start with the Root Account |
| IAM User Passwords | Credential Account Policy |
| Identify AWS Administrators | Get All AWS Admins with Powershell |
| Adding MFA to IAM Users | Using MFA on AWS MFA in 10 Steps |
| MFA on CLI | MFA Token with CLI |
| IAM Roles | Gaining Access to a role via CLI |
| Access Key Usage | Tracking Access Keys |
| Auditing all IAM Access Keys | List all access keys for an organization |
| Managing Access Keys | Manage Access Keys via SCP |
| Just in time Administration via STS | API Overview of STS |
| Create Temporary STS Access Keys | via Powershell |
| AWS Organizations | Organizations User Guide |
| Service Control Policies | SCP Overview |
| SCP Guardrails to get started | SCP for Org |