diff --git a/prowler b/prowler index 7630a312..1a1a5a03 100755 --- a/prowler +++ b/prowler @@ -412,10 +412,10 @@ check112(){ check113(){ TITLE113="$BLUE 1.13$NORMAL Ensure hardware MFA is enabled for the root account (Scored)" - COMMAND113=$($AWSCLI iam list-virtual-mfa-devices --profile $PROFILE --region $REGION --query 'VirtualMFADevices[*].User.Arn' --output text | awk -F":" '{ print $6 }'|tr '\n' ' ') + COMMAND113=$($AWSCLI iam get-account-summary --profile $PROFILE --region $REGION |grep AccountMFAEnabled | awk -F":\ " '{ print $2 }'|sed 's/,//') echo -e "\n$TITLE113" - if [[ $COMMAND113 ]]; then - echo " $OK OK $NORMAL *Virtual MFA is enabled. " + if [ $COMMAND113 == "1" ]; then + echo " $OK OK $NORMAL *Virtual or HW MFA is enabled. " else echo " $RED WARNING! MFA is not ENABLED for root account $NORMAL" fi