search

turbot / steampipe-mod-alicloud-compliance

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS across all of your Alibaba Cloud accounts using Powerpipe and Steampipe.
https://hub.powerpipe.io/mods/turbot/alicloud_compliance
Apache License 2.0
8 stars 3 forks source link

Control `cis_v100_1_14` should not alarm if max login attempts is less than 5 #49

Closed cbruno10 closed 1 year ago

cbruno10 commented 2 years ago

Describe the bug In CIS v1.0.0 for Alibaba Cloud, it recommends checking:

In the output, make sure that the MaxLoginAttemps parameter is set to <5> or a smaller number.

Steampipe version (steampipe -v) v0.15.4

Plugin version (steampipe plugin list) alicloud v0.9.0

To reproduce Run steampipe check control.cis_v100_1_14 for an account that has a password policy with max login attempts set to 4 or lower

Expected behavior The control should report OK

Additional context Add any other context about the problem here.

github-actions[bot] commented 1 year ago

'This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.'

github-actions[bot] commented 1 year ago

'This issue was closed because it has been stalled for 90 days with no activity.'