Get Started

Getting Started

Deploy

Onboard and Manage Accounts

Amazon Web Services (AWS)

Google Cloud Platform (GCP)

Microsoft Azure

Oracle Cloud Infrastructure (OCI)

Additional Providers

Collect and Integrate Data

Harvesting & Event-Driven Harvesting

Integrations

Understand Data

Visibility & Reporting

Inventory

Query Filters & Insights

Manage and Act on Data

Bots & Automation

Infrastructure as Code (IaC) Security

Cloud IAM Governance

Vulnerability Management

Workload Security

Manage System Settings

InsightCloudSec System Configuration

Developer Resources

APIs

Support

AWS Least-Privileged Access (LPA)

The AWS Least Privileged Access (LPA) feature within InsightCloudSec collects and presents the actions executed by a given user or role within a given time period. These logged actions are collected and analyzed to provide insights to the customer. This feature is mainly documented in two sections:

Setup, which presents configuration instructions

New Onboarding

As of InsightCloudSec v. 23.4.11, the new universal onboarding experience for AWS accounts uses CloudFormation Templates (CFTs) to automatically provision relevant accounts with the necessary policies and roles. This means it is easiest to perform LPA configuration while onboarding an account/organization. Review AWS Cloud - Onboarding for more information.

Usage, which presents how to view and utilize the data collected within InsightCloudSec

If you are looking for LPA functionality related to Azure, check out the content around Azure LPA Setup.

As always, if you have questions about this feature or any others, reach out us through any of the options identified under Getting Support.

Did this page help you?

Cloud IAM Governance

Review Identity Analysis

Cloud IAM Governance

AWS LPA Setup