Control: 1.1 Avoid the use of the 'root' account
An Alibaba Cloud account can be viewed as a “root” account. The "root" account has full control permissions to all cloud products and resources under such account. It is highly recommended that the use of this account should be avoided.
All users should operate resources at the RAM user level and follow the principle of least privilege. Follow the remediation instructions of the
Ensure RAM policies are attached only to groups or roles recommendation. For more information about RAM user, see terms of RAM user.
Run the control in your terminal:
steampipe check alicloud_compliance.control.cis_v100_1_1
Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share alicloud_compliance.control.cis_v100_1_1
This control uses a named query:ram_root_account_unused