Ensure your AWS account is configured to use security challenge questions so Amazon can use these questions to verify your identity in case your account become compromised or if you just need to contact their customer service for help.
This rule can help you with the following compliance standards:
This rule can help you work with the AWS Well-Architected Framework
This rule resolution is part of the Cloud Conformity Security & Compliance tool for AWS
By default there are no security challenge questions set for your AWS account. Enabling and configuring security challenge questions will add an extra layer of security to your account.
Note: Amazon does not currently provide an API for working with the security challenge questions, therefore you need to verify and configure the feature manually using the AWS Management Console and acknowledge this action within “Security Challenge Questions” rule settings available on Cloud Conformity console.
To determine if the Security Challenge Questions feature is enabled within your AWS account, perform the following:Note: Verifying security challenge questions configuration using AWS Command Line Interface (CLI)/AWS API is not currently supported, the feature configuration needs to be checked manually through AWS Management Console.
Remediation / Resolution
To secure your AWS account identity by enabling and configuring security challenge questions, perform the following:Note: Setting your account security challenge questions using AWS Command Line Interface (CLI)/AWS API is not currently supported, the feature needs to be configured manually through AWS Management Console.
Unlock the Remediation Steps
Gain free unlimited access
to our full Knowledge Base
Over 750 rules & best practices
Get started for FREE
You are auditing:
Account Security Challenge Questions
Risk level: High