AWS
Google Cloud
Kubernetes
Microsoft AzureOverview
AI models and endpoints should run with least privilege. Broad identities can allow model extraction, unauthorized deployment changes, data access through tools, or lateral movement into storage and vector databases used by AI workloads.
Remediation guidance
Remediation
Replace broad model and endpoint identities with workload-specific roles. Grant only the actions required to invoke, deploy, or read the specific models and datasets used by the workload.
Rollout guidance
- Inventory the identities used by AI endpoints and training jobs.
- Replace owner, contributor, editor, administrator, and wildcard policies with scoped permissions.
- Separate deployment identities from runtime inference identities.
- Re-scan and track temporary exceptions with expiry dates.
Query logic
These are the stored checks tied to this control.
AI models should not be reachable through broad identities
Connectors
AWSGoogle CloudKubernetesMicrosoft Azure
Covered asset types
AI ServicesIAM RoleService Account
Expected check: eq []
{
sageMakerModels(where: { executionRoleARN_MATCHES: ".*:role/(admin|administrator|owner|power|full).*" }) { ...AssetFragment }
vertexAIEndpoints(where: { deployedModels_SOME: { serviceAccount_MATCHES: "(?i).*(admin|owner|editor|power).*" } }) { ...AssetFragment }
azureAIServiceAccounts(where: { OR: [ { roleIDs_INCLUDES: "Owner" } { roleIDs_INCLUDES: "Contributor" } { roleIDs_INCLUDES: "User Access Administrator" } { roleIDs_INCLUDES: "Administrator" } ] }) { ...AssetFragment }
azureAIFoundryProjects(where: { OR: [ { roleIDs_INCLUDES: "Owner" } { roleIDs_INCLUDES: "Contributor" } { roleIDs_INCLUDES: "User Access Administrator" } { roleIDs_INCLUDES: "Administrator" } ] }) { ...AssetFragment }
azureOpenAIDeployments(where: { OR: [ { roleIDs_INCLUDES: "Owner" } { roleIDs_INCLUDES: "Contributor" } { roleIDs_INCLUDES: "User Access Administrator" } { roleIDs_INCLUDES: "Administrator" } ] }) { ...AssetFragment }
azureMachineLearningEndpoints(where: { OR: [ { roleIDs_INCLUDES: "Owner" } { roleIDs_INCLUDES: "Contributor" } { roleIDs_INCLUDES: "User Access Administrator" } { roleIDs_INCLUDES: "Administrator" } ] }) { ...AssetFragment }
}
