Questions tagged with Security, Identity, & Compliance
Secure your workloads and applications in the cloud
Content language: English
Filter questions
Select tags to filter
Sort by
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
1365 results
For a multi-account AWS environment using AWS Organizations, how do you decide which security and governance controls should be enforced centrally and which should remain configurable at the individua...
1
answers
0
votes
27
views
asked 15 hours ago
I am evaluating Amazon Cognito User Pools for an application that uses the OIDC pair (iss, sub) as the durable external identity key.
AWS documentation states that the Cognito sub attribute is unique...
1
answers
0
votes
35
views
asked 4 days ago
I am troubleshooting an AWS STS AssumeRole request that consistently fails with:
AccessDenied: not authorized to perform sts:SetSourceIdentity
The source is an IAM user using short-lived credentials...
1
answers
0
votes
98
views
asked 22 days ago
Our company AWS account (Account ID: 0582-6449-5999) has been suspended for more than 3 days due to a suspected suspicious activity flag. All console access (including root sign-in) is blocked with th...
2
answers
0
votes
97
views
asked 25 days ago
An AWS IAM Identity Center group is mapped to the built-in VIEWER role of an EKS managed Argo CD Capability.
A user belonging only to this group was nevertheless able to delete an Argo CD Application...
3
answers
0
votes
65
views
asked a month ago
Hi,
We are facing issues with federating in to AWS using our OIDC isser IDP: iamcredentials.apis-tpczero.goog
Things we have done till now:
1) Created a identity provider in AWS: \
provider: iamcre...
1
answers
0
votes
120
views
asked 2 months ago
I'm federating a GCP service account into AWS via Workload Identity Federation
(no static AWS access keys) using `sts:AssumeRoleWithWebIdentity`, and every
attempt fails with:
An error occu...
1
answers
0
votes
187
views
asked 2 months ago
I have more than 20 petabyte data. in on prem now, the people are using the security team are using this data. This is a crucial data, legal data. And this legal data only using the few people say lik...
2
answers
0
votes
131
views
asked 2 months ago
Summary
I've configured PingFederate 13.0.3 as an external SAML 2.0 identity provider for AWS IAM Identity Center. The identity source change was accepted successfully by AWS ("You successfully chang...
2
answers
0
votes
152
views
asked 3 months ago
I can not long into root user account after resetting password and authenticator. Please help
2
answers
0
votes
95
views
asked 3 months ago
## Question
We have two `AWS::GuardDuty::MalwareProtectionPlan` resources in separate member accounts under an AWS Organization. Both plans report `Status: ACTIVE` with empty `StatusReasons`, but nei...
4
answers
0
votes
135
views
asked 5 months ago
Looking to create an architecture with the following:
AWS workspaces secure browser with IAM Identity Center to allow my external users to use SSO capabilities using their current IdP's.
There are m...
2
answers
0
votes
581
views
asked 6 months ago