Files
prowler/checks/check111
Toni de la Fuente a2806ad86b populated checks
2018-03-23 10:05:20 -04:00

19 lines
680 B
Plaintext

CHECK_ID_check111=""
CHECK_TITLE_check111=""
CHECK_SCORED_check111=""
CHECK_TYPE_check111=""
CHECK_ALTERNATE_check111="check111"
check111(){
# "Ensure IAM password policy expires passwords within 90 days or less (Scored)"
COMMAND111=$($AWSCLI iam get-account-password-policy $PROFILE_OPT --region $REGION --output json | grep MaxPasswordAge | awk -F: '{ print $2 }'|sed 's/\ //g'|sed 's/,/ /g' 2> /dev/null)
textTitle "$ID111" "$TITLE111" "SCORED" "LEVEL1"
if [[ $COMMAND111 ]];then
if [ "$COMMAND111" == "90" ];then
textOK "Password Policy includes expiration"
fi
else
textWarn "Password expiration not set or set greater than 90 days "
fi
}