aws/maxCredentialUsageAgeAWSConfigActive.json at main · inforticx/aws · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
{
    "Resources": {
        "AWSConfigRule": {
            "Type": "AWS::Config::ConfigRule",
            "Properties": {
                "ConfigRuleName": {
                    "Ref": "ConfigRuleName"
                },
                "Description": "Checks whether your AWS Identity and Access Management (IAM) users have passwords or active access keys that have not been used within the specified number of days you provided.",
                "InputParameters": {
                    "maxCredentialUsageAge": {
                        "Fn::If": [
                            "maxCredentialUsageAge",
                            {
                                "Ref": "maxCredentialUsageAge"
                            },
                            {
                                "Ref": "AWS::NoValue"
                            }
                        ]
                    }
                },
                "Scope": {},
                "Source": {
                    "Owner": "AWS",
                    "SourceIdentifier": "IAM_USER_UNUSED_CREDENTIALS_CHECK"
                },
                "MaximumExecutionFrequency": {
                    "Ref": "MaximumExecutionFrequency"
                }
            }
        }
    },
    "Parameters": {
        "ConfigRuleName": {
            "Type": "String",
            "Default": "iam-user-unused-credentials-check",
            "Description": "The name that you assign to the AWS Config rule.",
            "MinLength": "1",
            "ConstraintDescription": "This parameter is required."
        },
        "MaximumExecutionFrequency": {
            "Type": "String",
            "Default": "TwentyFour_Hours",
            "Description": "The frequency that you want AWS Config to run evaluations for the rule.",
            "MinLength": "1",
            "ConstraintDescription": "This parameter is required.",
            "AllowedValues": [
                "One_Hour",
                "Three_Hours",
                "Six_Hours",
                "Twelve_Hours",
                "TwentyFour_Hours"
            ]
        },
        "maxCredentialUsageAge": {
            "Type": "String",
            "Default": "90",
            "Description": "Maximum number of days a credential cannot be used. The default value is 90 days.",
            "MinLength": "1",
            "ConstraintDescription": "This parameter is required."
        }
    },
    "Metadata": {
        "AWS::CloudFormation::Interface": {
            "ParameterGroups": [
                {
                    "Label": {
                        "default": "Required"
                    },
                    "Parameters": [
                        "maxCredentialUsageAge"
                    ]
                },
                {
                    "Label": {
                        "default": "Optional"
                    },
                    "Parameters": []
                }
            ]
        }
    },
    "Conditions": {
        "maxCredentialUsageAge": {
            "Fn::Not": [
                {
                    "Fn::Equals": [
                        "",
                        {
                            "Ref": "maxCredentialUsageAge"
                        }
                    ]
                }
            ]
        }
    }
}