Skip to content

Commit 49c6cfe

Browse files
authored
Update aws_access_keys_rotated_x_days.yaml
1 parent 502a716 commit 49c6cfe

File tree

1 file changed

+1
-21
lines changed

1 file changed

+1
-21
lines changed

compliance/controls/baseline/aws/IAM/aws_access_keys_rotated_x_days.yaml

Lines changed: 1 addition & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -7,27 +7,7 @@ parameters:
77
- key: awsIamAccessKeyAge
88
value: '180'
99
policy:
10-
language: sql
11-
primary_resource: aws_iam_access_key
12-
definition: |
13-
SELECT
14-
access_key_id AS resource,
15-
platform_integration_id AS platform_integration_id,
16-
platform_resource_id AS platform_resource_id,
17-
CASE
18-
WHEN status <> 'Active' THEN 'skip'
19-
WHEN create_date + ('{{.awsIamAccessKeyAge}}' || ' days')::interval < NOW() THEN 'alarm'
20-
ELSE 'ok'
21-
END AS status,
22-
CASE
23-
WHEN status <> 'Active' THEN 'key is not activated'
24-
WHEN create_date + ('{{.awsIamAccessKeyAge}}' || ' days')::interval < NOW() THEN 'key is too old'
25-
ELSE 'key is not old yet'
26-
END AS reason,
27-
region,
28-
account_id
29-
FROM
30-
aws_iam_access_key v
10+
"@ref" : "aws_iam_access_keys_policy"
3111
severity: medium
3212
tags:
3313
platform_score_cloud_service_name:

0 commit comments

Comments
 (0)