duo-labs / duo-labs/cloudmapper
Give a few days of grace period for users that have not logged in
Open
audit
- Dominant language
- JavaScript
- Stars
- 6.3k
- Forks
- 836
- PR merge metrics
- No merged PRs in 30d
Description
It is somewhat common to see IAM users that have not logged, or that have a password login but no MFA, for IAM users that were only created within the past few days. Those are MEDIUM severity alerts. I should have some grace period, such as:
- 1 day -> no finding
- less than 7 days -> LOW
- More than that -> MEDIUM
I'm not sure about the < 7 days one. Make it configurable?
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.