FedRAMP Controls / AU
AU-9(4) Access by Subset of Privileged Users
Family AU
Baselines moderate
Mapped KSIs 1
Control statement
Authorize access to management of audit logging functionality to only {{ insert: param, au-09.04_odp }}. Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is
preserved in the catalog database.
Covered by these Key Security Indicators
| KSI | Title | Category |
|---|---|---|
| KSI-IAM-04 | Just-in-Time Authorization Use a least-privileged, role and attribute-based, and just-in-time security authorization model for all user and non-user accounts and services. | Identity and Access Management |