Volver al hub

Cloud Least Privilege IOMs

This query outputs all identified indicators of misconfigurations (IOMs) related to least privilege.

Cloudmonitoring
FDR intermediatepor CrowdStrike (cql-hub.com) 1 min read

Query

CloudService="IAM" | in(field="policy_id", values=["5", "612", "401", "461", "7", "611", "444", "190", "203", "6", "563", "610"])
| groupBy(["policy_statement"])

Explicación

Importado desde cql-hub.com. Agrega explicación de pipes aquí.

Variables a ajustar

Revisa y ajusta los valores según tu entorno.