IAM Containment - AWS Security Incident Response User Guide

IAM Containment

The AWSSupport-ContainIAMPrincipal containment automation performs a reversible network containment of an IAM user or role, leaving the user or role in IAM, but isolating it from communicating with resources within your account.