Monitoring finding · EXC-004
Standing AdministratorAccess in production AWS account
Control ACC-03Amazon Web Services (ap-south-1)Detected 9 Oct 2026Severity high
ACC-03 · monitored control
Privileged access is just-in-time and reviewed
Role assignment · Principal · P-2224
automated test
- Reasoning
- Two platform engineers had permanent AdministratorAccess assignment in the prod-payments account. One removed 2026-10-02; one pending migration to TEAM just-in-time elevation.
- expected
- 0 standing admin assignments
- observed
- 1 (down from 2)
- Action / owner
- ○ No data available
None
No review signal applies to this finding.