Check provider logo

AWS account contact information is current

account_maintain_current_contact_details

Severitymedium
Serviceaccount
by Prowler

AWS account contact information is current for the primary contact and the alternate contacts for security, billing, and operations, with accurate email addresses and phone numbers.

Risk

Outdated or single-person contacts delay security notifications, slow incident response, and complicate account recovery.

AWS may throttle services during abuse mitigation, reducing availability. Missed alerts enable ongoing misuse, risking data exfiltration and unauthorized changes (integrity).

Run this check with Prowler CLI

prowler aws --checks account_maintain_current_contact_details

Run in Prowler Cloud

Recommendation

Adopt:

  • Primary and alternate contacts for security, billing, operations
  • Shared, monitored aliases and SMS-capable phone numbers (non-personal)
  • Centralized management across accounts with periodic reviews
  • Least privilege for who can modify contact data
  • Regular reachability tests and documented ownership

Remediation

CLI

aws account put-alternate-contact --alternate-contact-type=SECURITY --email-address=<SECURITY_EMAIL> --name="<SECURITY_CONTACT_NAME>" --phone-number="<SECURITY_PHONE>" --title="Security"

Terraform
Other
  1. Sign in to the AWS Management Console
  2. Open Billing and Cost Management, then click your account name > Account
  3. Under Contact information, click Edit, update details, then Update
  4. Under Alternate contacts, click Edit
  5. Enter Security contact name, email, and phone (use a team alias), then Update
  6. Repeat for Billing and Operations if needed

Source Code

Resource Type

Other

References