From c79d346961a6b5e927092f09316dceadae23db6e Mon Sep 17 00:00:00 2001 From: Toni de la Fuente Date: Mon, 11 May 2020 13:16:38 +0200 Subject: [PATCH] Fixed issue #596 on check114 --- checks/check114 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/checks/check114 b/checks/check114 index d1777c10..18188d93 100644 --- a/checks/check114 +++ b/checks/check114 @@ -19,7 +19,7 @@ check114(){ # "Ensure hardware MFA is enabled for the root account (Scored)" COMMAND113=$($AWSCLI iam get-account-summary $PROFILE_OPT --region $REGION --output json --query 'SummaryMap.AccountMFAEnabled') if [ "$COMMAND113" == "1" ]; then - COMMAND114=$($AWSCLI iam list-virtual-mfa-devices $PROFILE_OPT --region $REGION --output text --assignment-status Assigned --query 'VirtualMFADevices[*].[SerialNumber]' | grep '^arn:${AWS_PARTITION}:iam::[0-9]\{12\}:mfa/root-account-mfa-device$') + COMMAND114=$($AWSCLI iam list-virtual-mfa-devices $PROFILE_OPT --region $REGION --output text --assignment-status Assigned --query 'VirtualMFADevices[*].[SerialNumber]' | grep "^arn:${AWS_PARTITION}:iam::[0-9]\{12\}:mfa/root-account-mfa-device$") if [[ "$COMMAND114" ]]; then textFail "Only Virtual MFA is enabled for root" else