Files
prowler/checks/check111
2018-03-28 11:07:46 -04:00

17 lines
689 B
Plaintext

CHECK_ID_check111="1.11"
CHECK_TITLE_check111="Ensure IAM password policy expires passwords within 90 days or less (Scored)"
CHECK_SCORED_check111="SCORED"
CHECK_ALTERNATE_check111="check111"
check111(){
# "Ensure IAM password policy expires passwords within 90 days or less (Scored)"
COMMAND111=$($AWSCLI iam get-account-password-policy $PROFILE_OPT --region $REGION --output json | grep MaxPasswordAge | awk -F: '{ print $2 }'|sed 's/\ //g'|sed 's/,/ /g' 2> /dev/null)
if [[ $COMMAND111 ]];then
if [ "$COMMAND111" == "90" ];then
textPass "Password Policy includes expiration"
fi
else
textFail "Password expiration not set or set greater than 90 days "
fi
}