Checks whether each RAM user group contains one or more RAM users.
Scenario
A RAM user group must contain one or more RAM users. A RAM user group without RAM users may pose management risks.
Risk level
Default risk level: low.
You can change the risk level as required when you apply this rule.
Compliance evaluation logic
- If each RAM user group contains one or more RAM users, the evaluation result is compliant.
- If a RAM user group does not contain a RAM user, the evaluation result is non-compliant. For more information about how to correct the non-compliant configuration, see Non-compliance remediation.
Rule details
Item | Description |
---|---|
Rule name | ram-group-has-member-check |
Rule ID | ram-group-has-member-check |
Tag | RAM and Group |
Automatic remediation | Not supported |
Trigger type | Periodic execution |
Time interval | 24 hours |
Supported resource type | RAM user group |
Input parameter | None |
Non-compliance remediation
Add one or more RAM users to the RAM user group. For more information, see Add a RAM user to a RAM user group.