CHECK_ID_check_extra712="" CHECK_TITLE_check_extra712="" CHECK_SCORED_check_extra712="" CHECK_TYPE_check_extra712="" CHECK_ALTERNATE_check_extra712="check_extra712" extra712(){ # "Check if Amazon Macie is enabled (Not Scored) (Not part of CIS benchmark)" textTitle "$ID712" "$TITLE712" "NOT_SCORED" "EXTRA" textNotice "No API commands available to check if Macie is enabled," textNotice "just looking if IAM Macie related permissions exist. " MACIE_IAM_ROLES_CREATED=$($AWSCLI iam list-roles $PROFILE_OPT --query 'Roles[*].Arn'|grep AWSMacieServiceCustomer|wc -l) if [[ $MACIE_IAM_ROLES_CREATED -eq 2 ]];then textOK "Macie related IAM roles exist, so it might be enabled. Check it out manually." else textWarn "No Macie related IAM roles found. It is most likely not to be enabled" fi }