A principal holds permissions to create, update or attach IAM policies beyond what its function requires, or a compromised identity holds such permissions. Policies are then modified outside the organization's change process so that identities gain permissions they were not granted by design, and the change persists until it is detected. This compromises the integrity of the access model and the confidentiality and integrity of the resources the widened permissions reach.
IAM Policies are Modified Without Authorization
CCC.IAM.TH06
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.IAM.CP02 | IAM Users | The service can create, list, modify and delete user identities, each representing a single person or application that authenticates directly to the provider's identity platform. |
| CCC.IAM.CP06 | IAM Roles and Service Principals | The service can create, list, modify and delete roles or service principals, which are identities that applications and services use to access resources without a human user. |
| CCC.IAM.CP10 | Custom Roles | The service can create, list, modify and delete user-defined roles that specify exactly which actions are permitted, in addition to the roles the provider defines. |
| CCC.IAM.CP16 | Access Boundaries | The service may be configured with a boundary that caps the maximum effective permissions an identity can hold, regardless of the permissions granted to it. On providers without this feature, delegated permission grants have no upper bound. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.IAM.CN02 | Restrict IAM Policies Modification | Ensure that only designated administrative accounts have the ability to create, modify, or attach policies that define permissions for other identities. |