Skip to content

Commit

Permalink
clean up references
Browse files Browse the repository at this point in the history
  • Loading branch information
@0xjjoyy
0xjjoyy committed Apr 5, 2020
1 parent 905a02d commit b091f2c
Show file tree
Hide file tree
Showing 50 changed files with 142 additions and 130 deletions.
6 changes: 3 additions & 3 deletions docs/guardrails/billing/guardrails.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,6 @@ layout: default

## AWS Billing

| Identifier | Guardrail | Rationale | Remediation | References | Policy | IAM Actions |
|:--------------|:------------------------------------------------------------------------------------------------------------|:--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|:----------------------------------------------------------------------|:--------------------------------------------------------------------------|:---------|:--------------------------------------------------------------------------------------------|
| IAM-BILLING-1 | Check that the ability to modify or update AWS Billing options are only assumable to authorized principals. | In all AWS environments, ensure that only billing administrators and authorized principals should be able to update or modify AWS Billing options. Unauthorized modifications could affect your billing payments or account information such as email address | For unauthorized principals, either remove the associated IAM Actions | ['https://docs.aws.amazon.com/IAM/latest/UserGuide/list_awsbilling.html'] | IAM | ['aws-portal:ModifyBilling', 'aws-portal:ModifyAccount', 'aws-portal:ModifyPaymentMethods'] |
| Identifier | Guardrail | Rationale | Remediation | References | Policy | IAM Actions |
|:--------------|:------------------------------------------------------------------------------------------------------------|:--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|:----------------------------------------------------------------------|:-------------------------------------------------------------------------------------------------------------------------------------------------------|:---------|:--------------------------------------------------------------------------------------------|
| IAM-BILLING-1 | Check that the ability to modify or update AWS Billing options are only assumable to authorized principals. | In all AWS environments, ensure that only billing administrators and authorized principals should be able to update or modify AWS Billing options. Unauthorized modifications could affect your billing payments or account information such as email address | For unauthorized principals, either remove the associated IAM Actions | [https://docs.aws.amazon.com/IAM/latest/UserGuide/list_awsbilling.html](https://docs.aws.amazon.com/IAM/latest/UserGuide/list_awsbilling.html)<br><br> | IAM | ['aws-portal:ModifyBilling', 'aws-portal:ModifyAccount', 'aws-portal:ModifyPaymentMethods'] |
6 changes: 3 additions & 3 deletions docs/guardrails/budgets/guardrails.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,6 @@ layout: default

## AWS Budgets

| Identifier | Guardrail | Rationale | Remediation | References | Policy | IAM Actions |
|:--------------|:------------------------------------------------------------------------------------------------------------|:----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|:----------------------------------------------------------------------|:---------------------------------------------------------------------------------------------|:---------|:-------------------------|
| IAM-BUDGETS-1 | Check that the ability to modify or update AWS Budgets options are only assumable to authorized principals. | In all AWS environments, ensure that only Budget administrators and authorized principals should be able to update or modify AWS Budgets options. Unauthorized modifications could affect your cost and usage budgets | For unauthorized principals, either remove the associated IAM Actions | ['https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/budgets-managing-costs.html'] | IAM | ['budgets:ModifyBudget'] |
| Identifier | Guardrail | Rationale | Remediation | References | Policy | IAM Actions |
|:--------------|:------------------------------------------------------------------------------------------------------------|:----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|:----------------------------------------------------------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|:---------|:-------------------------|
| IAM-BUDGETS-1 | Check that the ability to modify or update AWS Budgets options are only assumable to authorized principals. | In all AWS environments, ensure that only Budget administrators and authorized principals should be able to update or modify AWS Budgets options. Unauthorized modifications could affect your cost and usage budgets | For unauthorized principals, either remove the associated IAM Actions | [https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/budgets-managing-costs.html](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/budgets-managing-costs.html)<br><br> | IAM | ['budgets:ModifyBudget'] |
Loading

0 comments on commit b091f2c

Please sign in to comment.