⌘/
Live
127ms

Stratos IAM

IAM Risk Center

Identity posture · Privilege escalation · Effective permissions

6

Identities

3

No MFA (console)

3

Escalatable

3

Stale Keys >90d

IdentityAccess LevelRiskMFAKey AgeEscalationUnused Perms

root

user · prod-payments

Full Admin
100
420d

ci-deploy

role · prod-payments

Full Admin
96
3 paths189

dev-bot

user · prod-payments

Power User
88
210d2 paths94

svc-deploy-prod

user · eks-platform

Read/Write
61
180d1 path41

lambda-data-processor

role · data-lake-prod

Read/Write
54
67

readonly-auditor

role · shared-services

Read Only
18
12
ci-deploy

prod-payments · 941230001

Type

role

Access Level

Full Admin

Risk Score

96

MFA

DISABLED

Policies

1

Inline Policies

0

Perm Boundary

No

Console Access

No

Tags

Team: platformEnv: prod

Escalation Paths

Root equivalent

3 steps

Live
5s agoCTiam:CreateAccessKey — root@941230001 (us-east-1)·18s agoGDTrojan:EC2/CryptoMiner — i-0a4b7c8d9e (us-east-1)·45s agoCTiam:AttachRolePolicy — ci-deploy + AdministratorAccess·1m agoMCSensitiveData:S3Object/Personal — 12 objects in audit-logs-prod·2m agoCTs3:PutBucketAcl — ml-training-data set to public-read·3m agoSHCIS 1.14 — Hardware MFA not enabled for root·5s agoCTiam:CreateAccessKey — root@941230001 (us-east-1)·18s agoGDTrojan:EC2/CryptoMiner — i-0a4b7c8d9e (us-east-1)·45s agoCTiam:AttachRolePolicy — ci-deploy + AdministratorAccess·1m agoMCSensitiveData:S3Object/Personal — 12 objects in audit-logs-prod·2m agoCTs3:PutBucketAcl — ml-training-data set to public-read·3m agoSHCIS 1.14 — Hardware MFA not enabled for root·