AC-6(1) Authorize Access to Security Functions

Family AC

Baselines moderate

Mapped KSIs 1

Control statement

Authorize access for {{ insert: param, ac-06.01_odp.01 }} to:
    (a)  {{ insert: param, ac-6.1_prm_2 }} ; and
    (b)  {{ insert: param, ac-06.01_odp.05 }}.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators

KSI	Title	Category
KSI-IAM-04	Just-in-Time Authorization Use a least-privileged, role and attribute-based, and just-in-time security authorization model for all user and non-user accounts and services.	Identity and Access Management