AliCloud Account ReportAliCloud ECS Disk Age ReportAliCloud ECS Disk DashboardAliCloud ECS Disk DetailAliCloud ECS Disk Encryption ReportAliCloud ECS Instance Age ReportAliCloud ECS Instance DashboardAliCloud ECS Instance DetailAliCloud ECS Instance Public Access ReportAliCloud ECS Security Group DashboardAliCloud ECS Security Group DetailAliCloud ECS Snapshot Age ReportAliCloud ECS Snapshot DashboardAliCloud ECS Snapshot DetailAliCloud Key Age ReportAliCloud Key DetailAliCloud KMS CMK Lifecycle ReportAliCloud KMS Key DashboardAliCloud OSS Bucket Age ReportAliCloud OSS Bucket DashboardAliCloud OSS Bucket DetailAliCloud OSS Bucket Encryption ReportAliCloud OSS Bucket Lifecycle ReportAliCloud OSS Bucket Logging ReportAliCloud OSS Bucket Public Access ReportAliCloud RAM Access Key Age ReportAliCloud RAM Credential ReportAliCloud RAM Group Age ReportAliCloud RAM Group DashboardAliCloud RAM Group DetailAliCloud RAM Policy DetailAliCloud RAM Role Age ReportAliCloud RAM Role DashboardAliCloud RAM Role DetailAliCloud RAM User Age ReportAliCloud RAM User DashboardAliCloud RAM User DetailAliCloud RAM User MFA ReportAliCloud RDS Instance Age ReportAliCloud RDS Instance DashboardAliCloud RDS Instance DetailAliCloud RDS Instance Public Access ReportAliCloud VPC DashboardAliCloud VPC DetailAliCloud VPC vSwitch Detail
Dashboard: AliCloud RAM Credential Report
This report answers the following questions:
- Which users do not have a password?
- What is the age of the password?
- When was the password last changed?
- When were the access keys last used?
This dashboard contains 1 table and 2 texts.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-alicloud-insightsStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select AliCloud RAM Credential Report dashboard.
You could also snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe dashboard run alicloud_insights.dashboard.ram_credential_report --shareQueries
This dashboard uses the the following queries:
select user_name as "User Name", 'acs:ram::' || r.account_id || ':user/' || user_name as "User ARN",
password_exist as "Password Enabled", mfa_active as "MFA Active", password_active as "Password Status", now()::date - password_last_changed::date as "Password Age in Days", password_last_changed as "Password Changed Timestamp", date_trunc('day',age(now(),user_last_logon))::text as "Password Last Used", user_last_logon as "Password Last Used Timestamp", date_trunc('day',age(now(),password_next_rotation))::text as "Next Password Rotation", password_next_rotation "Next Password Rotation Timestamp",
access_key_1_active as "Access Key 1 Active", now()::date - access_key_1_last_rotated::date as "Key 1 Age in Days", access_key_1_last_rotated as "Key 1 Last Rotated", date_trunc('day',age(now(),access_key_1_last_used))::text as "Key 1 Last Used", access_key_1_last_used as "Key 1 Last Used Timestamp",
access_key_2_active as "Access Key 2 Active", now()::date - access_key_2_last_rotated::date as "Key 2 Age in Days", access_key_2_last_rotated as "Key 2 Last Rotated Timestamp", date_trunc('day',age(now(),access_key_2_last_used))::text as "Key 2 Last Used", access_key_2_last_used as "Key 2 Last Used Timestamp",
a.title as "Account", r.account_id as "Account ID"
from alicloud_ram_credential_report as r, alicloud_account as awhere a.account_id = r.account_idorder by user_name;