Control statement
Automatically audit account creation, modification, enabling, disabling, and removal actions.
Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is
preserved in the catalog database.
Covered by these Key Security Indicators
| KSI | Title | Category |
|---|---|---|
| KSI-IAM-04 | Just-in-Time Authorization Use a least-privileged, role and attribute-based, and just-in-time security authorization model for all user and non-user accounts and services. | Identity and Access Management |
| KSI-MLA-02 | Audit Logging _Persistently_ review and audit logs. | Monitoring, Logging, and Auditing |
| KSI-MLA-07 | Event Types Maintain a list of information resources and event types that will be monitored, logged, and audited, then do so. | Monitoring, Logging, and Auditing |
| KSI-SVC-04 | Configuration Automation Manage configuration of machine-based information resources using automation. | Service Configuration |