Skip to content

Conversation

@tmekari
Copy link
Contributor

@tmekari tmekari commented Mar 14, 2023

Description of changes:
Added runbook for SC IAM 22. This is similar to IAM 8 so I am using the same remediation. Because of the 45 day requirement for this remediation, it needs its own runbook so I can pass that parameter along.

Deploys successfully, passes all unit tests, tested by @hearde and successful.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@tmekari tmekari changed the title Adding runbook for SC IAM 22 Added runbook for SC IAM 22 Mar 14, 2023
return new RevokeUnusedIAMUserCredentialsDocument(stage, id, {
...props,
controlId: 'IAM.22',
parameterToPass: '45',
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

could this be named something more descriptive? I'm not entirely sure the purpose of the remediation but maybe something like "LifetimeDaysExceeding"?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In this instance it makes sense for there to be a generic name because this props struct is used by different remediations. There's probably a more elegant way of specifying something like this, where the implementation only varies by a value or two across different controls/standards, but that's not an abstraction that this was originally designed for.

@tmekari tmekari merged commit fa181de into develop Mar 15, 2023
@tmekari tmekari deleted the bugfix/missingIAM22ControlRunbook branch March 15, 2023 16:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants