Add Kwadwo to IAM audit file

[ccostino]

This changset adds @kwadwok15's account to our IAM audit file.

Changes proposed in this pull request:

• Adds Kwadwo's AWS account to the audit file

Security considerations

• Helps keep our system security by auditing new account

[pburkholder]

So running this:

aws-vault exec cg-govcloud -- bin/inspec exec ./aws-mfa/ -t aws:// --input-file inputs.yml --silence-deprecations=aws

Results in:

So we can do one of:

• Change 12 to 13 in aws-mfa/controls/mfa.rb, line 33 (gets us going again) or,
• Change that file to use 'inputs.yml' and put the number of entries there instead (a better fix)

[ccostino]

I updated the test, @pburkholder, it was the quicker and easier option. I thought about modifying it to reference the input file itself and wasn't sure how to proceed - I'd have to spend some time understanding how InSpec parses the file and makes its info available in the tests) - however, it makes me wonder if this test counting users is useful. The InSpec process will just take all records listed in the file, will it not? Is there a situation where it might not audit/test everything put in the input file?

If there is, then I wonder if it's wise to put the count in the input file itself vs. having that be defined separately as it is now, to ensure the audit it done correctly. I may be overthinking it, but I just want to make sure that 1) we have a useful test, and 2) the audit is done correctly.

[pburkholder]

I'm going to merge this and fix the number of users separately.

[ccostino]

D'oh, sorry! I forgot about that again when I removed John.