Ensure there is no policy with Empty array Condition

LOW

Description

The optional Condition element structure requires that you use a condition operator and a key-value pair. When the condition value is empty, the condition returns true and the policy statement provides no permissions.

Remediation

IAM Policies need to be changed. In AWS Console -

  1. Sign in to the AWS console and go to the IAM console.
  2. In the Navigation pane, select Policies.
  3. In the list of policies, select the policy to edit.
  4. Select the Permissions tab, and then choose Edit policy.
  5. On the review page, review the changes and click Save. In Terraform - Review the policy attached to the resource and ensure necessary changes are made.

Policy Details

Rule Reference ID: AC_AWS_0420
CSP: AWS
Remediation Available: Yes
Resource: aws_iam_policy
Resource Type: Policy

Frameworks