The world's largest
LLM-formatted
AWS misconfiguration
database.

# 3e4cd300-6cff-4fd6-9504-38c0f38ab2ac — AWS account does not have alternate security contact information configured service: ACCOUNT severity: medium risk: security, operations ## Detection AWS account has no security contact defined in the alternate contacts settings. Security Hub control Account.1 fails. ## What it is AWS uses the alternate security contact to notify your organization about security-related issues. Without a designated security contact, critical notifications such as abuse reports, vulnerability disclosures, and compliance alerts may go to the root account email, which might not be monitored by the security team. This is a CIS AWS Foundations Benchmark v5.0.0 requirement (control 1.2) and maps to NIST 800-53 CM-2. Configuring this contact takes minimal effort and ensures that security-relevant communications reach the right personnel promptly, reducing mean time to response for security incidents. ## How to fix Configure an alternate security contact for the AWS account by navigating to Account Settings and providing a security contact email, phone number, and name. This ensures AWS can reach the appropriate team for security-related notifications.