Use the Conformity Knowledge Base AI to help improve your Cloud Posture

Current Contact Details

Trend Cloud One™ – Conformity is a continuous assurance tool that provides peace of mind for your cloud infrastructure, delivering over 1000 automated best practice checks.

Risk Level: Medium (should be achieved)
Rule ID: Budgets-005

Ensure that your AWS accounts maintain valid (current) contact email and phone information and reference more than one person within your organization in order to adhere to AWS security best practices.

This rule can help you with the following compliance standards:

  • CISAWSF

For further details on compliance standards supported by Conformity, see here.

This rule can help you work with the AWS Well-Architected Framework.

This rule resolution is part of the Conformity Security & Compliance tool for AWS.

Security

Using valid contact information for your AWS accounts and multiple individuals as recipients is mandatory in case of mitigating urgent issues within these accounts. Current contact information provides a genuine communication channel between your organization's accounts and Amazon Web Services.


Audit

To determine if the contact information provided for your AWS accounts is valid, perform the following:

Note: Checking your AWS account contact information via Command Line Interface (CLI) is not currently supported.

Using AWS Console

01 Sign in to the AWS Management Console using your root credentials or using an IAM user who has permission to read and write AWS billing information.

02 Navigate to Billing & Cost Management Dashboard at https://console.aws.amazon.com/billing/home#/.

03 From the navigation bar, choose your AWS account name, then select My Account.

04 On My Account page, review and verify the current contact details set for the selected AWS account, available within Account Settings, Contact Information and Alternate Contacts sections.

05 If the current contact information is not valid anymore, Amazon Web Services will not be able to contact you (i.e. the selected AWS account owner) and inform you about the existing issue(s) that must be mitigated.

06 Repeat steps no. 1 – 5 for each AWS account that you want to examine.

Remediation / Resolution

To update invalid contact information for your AWS accounts, perform the following actions:

Note: Updating contact information for your AWS account via Command Line Interface (CLI) is not currently supported.

Using AWS Console

01 Sign in to the AWS Management Console using your root credentials or using an IAM user who has permission to read and write AWS billing information.

02 Navigate to Billing & Cost Management Dashboard at https://console.aws.amazon.com/billing/home#/.

03 From the navigation bar, choose your AWS account name, then select My Account.

04 On My Account page, click the Edit button next to Account Settings, Contact Information and Alternate Contacts sections, type your updated contact information then choose Update to apply the changes.

05 Repeat steps no. 1 – 4 for each AWS account with invalid contact information.

References

Publication date Sep 13, 2017