By using AWS re:Post, you agree to the Terms of Use
AWS re:Postre:Post

Is it a best practice to archive all active findings for Access Analyzer on a new Control Tower setup?

0

I am working through the Cloud Environment Guide Workshop in preparation for an upcoming customer Immersion Day. The Control Tower has been deployed with the various best practices recommended by the Workshop. I have reached the step where I run the Access Analyzer, and it has about 20 Active Findings such as delegated permissions and similar. Since this is a new setup, and all of the changes have been recommended as best practices by AWS, should I tell my customer to Archive all of the Active Findings so they can start off with a clean slate?

Topics
Security, Identity, & ComplianceManagement & Governance
Tags
Security, Identity, & ComplianceAWS Control Tower
Language
English
profile picture
AWS
Ryan
asked 5 months ago49 views
1 Answer
0

The part of the workshop demonstrate how customer can use other AWS services that help them monitor and secure AWS Control Tower resources. The IAM Access Analyser lab is to demonstrate how customer can get ready the environment for external audit. Customer can run this portion of the workshop in a test environment.

AWS
ronald_l
answered 5 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content