Implementation of Maker checker concept to user creation / assigning permissions

Question

Hi,

How can I enforce the maker checker concept in user creation and assigning permissions to users / groups.

I.e. If an admin/root user assigning the services to the user, someone (other than the user who assign the service) should verify the request then only it got applied.

Randy · Answer

Hi Vinoth, \
There is a detailed blog post on how to achieve this with automation. Please see: [How to automate the review and validation of permissions for users and groups in AWS IAM Identity Center](https://aws.amazon.com/blogs/security/how-to-automate-the-review-and-validation-of-permissions-for-users-and-groups-in-aws-iam-identity-center/).

In short, this blog post covers the following use cases:
* How to maintain control over permissions and efficiently conduct thorough audits.
* How to regularly review granted permissions to uphold the principle of least privilege.

Best regards, \
Randy

Implementation of Maker checker concept to user creation / assigning permissions

Add your answer

Relevant content