From cb98251a7a32c8adff810044c4ab6d7fd063f87b Mon Sep 17 00:00:00 2001 From: Toni de la Fuente Date: Tue, 20 Sep 2016 17:00:28 -0400 Subject: [PATCH 1/2] Fixed issue #8, check113 --- prowler | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/prowler b/prowler index 23aba489..7630a312 100755 --- a/prowler +++ b/prowler @@ -414,8 +414,8 @@ check113(){ TITLE113="$BLUE 1.13$NORMAL Ensure hardware MFA is enabled for the root account (Scored)" COMMAND113=$($AWSCLI iam list-virtual-mfa-devices --profile $PROFILE --region $REGION --query 'VirtualMFADevices[*].User.Arn' --output text | awk -F":" '{ print $6 }'|tr '\n' ' ') echo -e "\n$TITLE113" - if [ $COMMAND113 ]; then - echo " $OK OK $NORMAL" + if [[ $COMMAND113 ]]; then + echo " $OK OK $NORMAL *Virtual MFA is enabled. " else echo " $RED WARNING! MFA is not ENABLED for root account $NORMAL" fi From 19ab11f072a8a15f14f83d845628006882140194 Mon Sep 17 00:00:00 2001 From: Toni de la Fuente Date: Tue, 20 Sep 2016 17:14:15 -0400 Subject: [PATCH 2/2] Fixed issue #9, check113 --- prowler | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/prowler b/prowler index 7630a312..1a1a5a03 100755 --- a/prowler +++ b/prowler @@ -412,10 +412,10 @@ check112(){ check113(){ TITLE113="$BLUE 1.13$NORMAL Ensure hardware MFA is enabled for the root account (Scored)" - COMMAND113=$($AWSCLI iam list-virtual-mfa-devices --profile $PROFILE --region $REGION --query 'VirtualMFADevices[*].User.Arn' --output text | awk -F":" '{ print $6 }'|tr '\n' ' ') + COMMAND113=$($AWSCLI iam get-account-summary --profile $PROFILE --region $REGION |grep AccountMFAEnabled | awk -F":\ " '{ print $2 }'|sed 's/,//') echo -e "\n$TITLE113" - if [[ $COMMAND113 ]]; then - echo " $OK OK $NORMAL *Virtual MFA is enabled. " + if [ $COMMAND113 == "1" ]; then + echo " $OK OK $NORMAL *Virtual or HW MFA is enabled. " else echo " $RED WARNING! MFA is not ENABLED for root account $NORMAL" fi