用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-database-5-8命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
基于 SOC 职业分类
正在显示 SKILL.md
| name | cis-aws-database-5.8 |
| description | Ensure Authentication and Access Control is Enabled |
| category | cis-database |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","database","elasticache","redis","authentication","access-control","iam","acl"] |
| cis_id | 5.8 |
| cis_benchmark | CIS AWS Database Services Benchmark v2.0.0 |
| tech_stack |
| ["aws"] |
| cwe_ids | [] |
| chains_with | ["cis-aws-database-5.1","cis-aws-database-5.7"] |
| prerequisites | [] |
| severity_boost | {} |
Individual creates IAM roles that would give specific permission to what the user can and cannot do within that database. The Access Control List (ACLs) allows only specific individuals to access the resources.
N/A
Use specific client's applications or tools that allow the authorized personnel to connect to the database.
Sign in to the AWS Management Console
Open the Amazon Keyspaces Console
Find Services search bar or by directly accessing the console at https://console.aws.amazon.com/keyspaces/.Select the Keyspace
Enable IAM for Cassandra
Configuration tab.Authentication and access control section, locate the "IAM for Cassandra" option.Edit.Enable option to enable IAM for Cassandra authentication and authorization.Save to enable IAM for Cassandra.Define IAM Roles and Permissions
Identity and Access Management (IAM) in the AWS Management Console.Review and Update Access Control
Configuration tab.Authentication and access control section, click on Access Control Lists (ACLs).Verify Authentication and Access Control
IAM authentication is enabled for ElastiCache/Keyspaces, IAM roles have least-privilege access, and ACLs are properly configured to restrict access to authorized users only.
Follow the same steps as the audit procedure to enable authentication and configure access control for ElastiCache clusters.
By default, IAM for Cassandra authentication is not enabled and ACLs are not configured.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 3.3 Configure Data Access Control Lists | x | x | x |
| v7 | 14.6 Protect Information through Access Control Lists | x | x | x |
Level 1 | Manual