turbot/aws_compliance

Control: Secrets Manager secrets should be rotated within specific number of days

Description

Ensure that AWS Secrets Manager secrets have been rotated in the past specified number of days. The rule is non-compliant if a secret has not been rotated for more than 'maxDaysSinceRotation' number of days. The default value is 90 days.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.secretsmanager_secret_last_changed_90_day

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.secretsmanager_secret_last_changed_90_day --share

SQL

This control uses a named query:

secretsmanager_secret_last_changed_90_day

Tags