From 124ae0fd2e46c3e37cb8228f05685831096fd5f8 Mon Sep 17 00:00:00 2001 From: Toni de la Fuente Date: Wed, 2 Jun 2021 17:53:12 +0200 Subject: [PATCH] Fixed kms keys compatibility in cli v2 and v1 --- checks/check_extra7126 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/checks/check_extra7126 b/checks/check_extra7126 index f1b80877..7b91e0e2 100644 --- a/checks/check_extra7126 +++ b/checks/check_extra7126 @@ -26,7 +26,7 @@ CHECK_CAF_EPIC_extra7126='Data Protection' extra7126(){ for regx in $REGIONS; do - LIST_OF_CUSTOMER_KMS_KEYS=$($AWSCLI kms list-aliases $PROFILE_OPT --region $regx --output text |grep -v :alias/aws/ |awk '{ print $4 }') + LIST_OF_CUSTOMER_KMS_KEYS=$($AWSCLI kms list-aliases $PROFILE_OPT --region $regx --query "Aliases[].[AliasName,TargetKeyId]" --output text |grep -v ^alias/aws/ |awk '{ print $2 }') if [[ $LIST_OF_CUSTOMER_KMS_KEYS ]];then for key in $LIST_OF_CUSTOMER_KMS_KEYS; do CHECK_STATUS=$($AWSCLI kms describe-key --key-id $key $PROFILE_OPT --region $regx --output json | jq -r '.KeyMetadata.KeyState')