File tree Expand file tree Collapse file tree 1 file changed +1
-21
lines changed 
compliance/controls/baseline/aws/IAM Expand file tree Collapse file tree 1 file changed +1
-21
lines changed Original file line number Diff line number Diff line change @@ -7,27 +7,7 @@ parameters:
77  - key : awsIamAccessKeyAge 
88    value : ' 180' 
99policy :
10-     language : sql 
11-     primary_resource : aws_iam_access_key 
12-     definition : | 
13-         SELECT 
14-           access_key_id AS resource, 
15-           platform_integration_id AS platform_integration_id, 
16-           platform_resource_id AS platform_resource_id, 
17-           CASE 
18-             WHEN status <> 'Active' THEN 'skip' 
19-             WHEN create_date + ('{{.awsIamAccessKeyAge}}' || ' days')::interval < NOW() THEN 'alarm' 
20-             ELSE 'ok' 
21-           END AS status, 
22-           CASE 
23-             WHEN status <> 'Active' THEN 'key is not activated' 
24-             WHEN create_date + ('{{.awsIamAccessKeyAge}}' || ' days')::interval < NOW() THEN 'key is too old' 
25-             ELSE 'key is not old yet' 
26-           END AS reason, 
27-           region, 
28-           account_id 
29-         FROM 
30-           aws_iam_access_key v 
10+     " @ref"   : "aws_iam_access_keys_policy" 
3111severity : medium 
3212tags :
3313    platform_score_cloud_service_name :
    
 
   
 
     
   
   
          
     
  
    
     
 
    
      
     
 
     
    You can’t perform that action at this time.
  
 
    
  
     
    
      
        
     
 
       
      
     
   
 
    
    
  
 
  
 
     
    
0 commit comments