mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 14:55:00 +00:00
26 lines
1.0 KiB
Bash
26 lines
1.0 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
CHECK_ID[check12]="1.2,1.02"
|
|
CHECK_TITLE[check12]="Ensure multi-factor authentication (MFA) is enabled for all IAM users that have a console password (Scored)"
|
|
CHECK_SCORED[check12]="SCORED"
|
|
CHECK_TYPE[check12]="LEVEL1"
|
|
CHECK_ALTERNATE[check102]="check12"
|
|
|
|
check12(){
|
|
# "Ensure multi-factor authentication (MFA) is enabled for all IAM users that have a console password (Scored)"
|
|
# List users with password enabled
|
|
COMMAND12_LIST_USERS_WITH_PASSWORD_ENABLED=$(cat $TEMP_REPORT_FILE|awk -F, '{ print $1,$4 }' |grep true | awk '{ print $1 }')
|
|
COMMAND12=$(
|
|
for i in $COMMAND12_LIST_USERS_WITH_PASSWORD_ENABLED; do
|
|
cat $TEMP_REPORT_FILE|awk -F, '{ print $1,$8 }' |grep "$i " |grep false | awk '{ print $1 }'
|
|
done)
|
|
textTitle "$ID12" "$TITLE12" "SCORED" "LEVEL1"
|
|
if [[ $COMMAND12 ]]; then
|
|
for u in $COMMAND12; do
|
|
textWarn "User $u has Password enabled but MFA disabled"
|
|
done
|
|
else
|
|
textOK "No users found with Password enabled and MFA disabled"
|
|
fi
|
|
}
|