News for hackers. Stuff that matters.

A comment on The State of AWS Security. Parent comment

Re:The State of AWS Security by jffry on Wednesday October 12, 2022 @09:16AM (#33176486)
The root user is not an IAM user and probably is not counted among those statistics. Enumerating IAM users won't include the root user, so it depends on how exactly they got that 40% metric

(Root user ARN is arn:aws:iam::555555555555:root versus IAM users which have ARNs like arn:aws:iam::555555555555:user/USERNAME)

[ Parent | on HN ]
Re:The State of AWS Security by christophetd on Wednesday October 12, 2022 @09:41AM (#33176825)
One of the authors here - confirming that "40 percent of organizations have at least one IAM user that has AWS Console access and does not have multi-factor authentication" is about IAM users and does not include the root user.
[ Parent | on HN ]