IAM Security Hardening

CRITICAL FINDINGS

• →Missing MFA on root and user accounts
• →Overly permissive IAM policies
• →Unused access keys and credentials
• →Weak password policies

CODE SAMPLE

def check_mfa_enabled(iam_client):
    users = iam_client.list_users()
    findings = []
    
    for user in users['Users']:
        username = user['UserName']
        mfa = iam_client.list_mfa_devices(
            UserName=username
        )
        
        if not mfa['MFADevices']:
            findings.append({
                'severity': 'HIGH',
                'user': username,
                'issue': 'MFA not enabled'
            })
    
    return findings