Blogs

In our latest blog, we explore IAM best practices and AWS and highlight two findings:   The majority of organizations don't enforce access key rotation for their IAM users. The majority of organizations aren't deleting inactive IAM accounts. We access keys that were nearly a decade old and many IAM accounts that hadn't been used in over a year, exposing a lot of risk surface that can likely be locked down.  How can you identify these old access keys and inactive IAM accounts? We have two Security Assessment rules that can help:   Remove/disable inactive user accounts within 90 days  

The blog post shares the details of our analysis:  https://www.netskope.com/blog/a-real-world-look-at-aws-best-practices-root-accounts   The Netskope Security Cloud makes it easy for you to check if your users are following these best practices, following the CIS AWS Foundations Benchmark. You can find and enable the four rules by searching for "Root" under the CIS AWS Foundations Benchmark profile.    If you have already enabled the CIS AWS Foundations Benchmark profile, you can view the results across your company.  Search "root" under the "Rule Name" filter to identify the four rules and check your results.