6 docs tagged with "cspm"

Lists a user's access keys with their age in days; keys older than the rotation window are the finding.

Assesses the IAM account password policy against CIS AWS Foundations Benchmark password controls, returning raw values and per-control PASS/FAIL verdicts.

Lists IAM roles whose trust policy admits principals from other AWS accounts, flagging external id and federation use; the cross-account exposure surface.

Lists IAM users alongside whether they have a virtual MFA device registered; console-capable users without MFA are the finding.

Reads a Lambda function's resource policy and flags statements granting invoke rights to a wildcard principal; the public-invoke exposure check.

Reports the four block-public-access settings plus object ownership for a bucket; any flag returning 0 leaves a public exposure path open.