Evaluates whether each Alibaba Cloud account has a specified RAM role. Accounts with the role are evaluated as Compliant.
Scenarios
Use this rule to verify that a specified RAM role is assigned to an Alibaba Cloud account, preventing business interruptions caused by permission issues.
Risk level
Default risk level: low.
You can change the risk level based on your business requirements.
Compliance evaluation logic
- If a specified RAM role is assigned to each Alibaba Cloud account, the evaluation result is Compliant.
- If a specified RAM role is not assigned to an Alibaba Cloud account, the evaluation result is Incompliant.
Rule details
| Item | Description |
| Rule name | root-has-specified-role |
| Rule identifier | root-has-specified-role |
| Tag | Role |
| Automatic remediation | Not supported |
| Trigger type | Periodic execution |
| Evaluation frequency | Interval of 24 hours |
| Supported resource type | Alibaba Cloud account |
| Input parameter | RoleName
Note Separate multiple values with commas (,). |