Checks whether each RAM user group contains one or more RAM users.

Scenario

A RAM user group must contain one or more RAM users. A RAM user group without RAM users may pose management risks.

Risk level

Default risk level: low.

You can change the risk level as required when you apply this rule.

Compliance evaluation logic

  • If each RAM user group contains one or more RAM users, the evaluation result is compliant.
  • If a RAM user group does not contain a RAM user, the evaluation result is non-compliant. For more information about how to correct the non-compliant configuration, see Non-compliance remediation.

Rule details

Item Description
Rule name ram-group-has-member-check
Rule ID ram-group-has-member-check
Tag RAM and Group
Automatic remediation Not supported
Trigger type Periodic execution
Time interval 24 hours
Supported resource type RAM user group
Input parameter None

Non-compliance remediation

Add one or more RAM users to the RAM user group. For more information, see Add a RAM user to a RAM user group.