Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(iam): update logic of Root Hardware MFA check #4726

Conversation

MrCloudSec
Copy link
Member

@MrCloudSec MrCloudSec commented Aug 12, 2024

Context

Fix #4652

Description

Update logic of iam_root_hardware_mfa_enabled check so if the ARN of the associated IAM user of the Virtual MFA device is "arn:aws:iam::[aws-account-id]:root", the AWS root account is not using a hardware-based MFA device for MFA protection.

Checklist

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@MrCloudSec MrCloudSec requested review from a team as code owners August 12, 2024 17:42
@github-actions github-actions bot added the provider/aws Issues/PRs related with the AWS provider label Aug 12, 2024
@MrCloudSec MrCloudSec added backport-to-v3 Backport PR to the v3 branch backport-to-v4.3 labels Aug 12, 2024
Copy link

codecov bot commented Aug 12, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 89.06%. Comparing base (bcc8d5f) to head (0fe1715).
Report is 581 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #4726      +/-   ##
==========================================
- Coverage   89.10%   89.06%   -0.04%     
==========================================
  Files         913      913              
  Lines       27913    27912       -1     
==========================================
- Hits        24871    24859      -12     
- Misses       3042     3053      +11     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copy link
Member

@puchy22 puchy22 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for your job! 👏

@MrCloudSec MrCloudSec merged commit e658125 into master Aug 16, 2024
12 of 13 checks passed
@MrCloudSec MrCloudSec deleted the PRWLR-4412-check-id-iam-root-hardware-mfa-enabled-pass-for-virtual-mfa-device-4652 branch August 16, 2024 15:49
@github-actions github-actions bot added the was-backported The PR was successfully backported to the target branch label Aug 16, 2024
Copy link
Contributor

💚 All backports created successfully

Status Branch Result
v3
v4.3

Questions ?

Please refer to the Backport tool documentation and see the Github Action logs for details

MrCloudSec added a commit that referenced this pull request Aug 16, 2024
(cherry picked from commit e658125)

# Conflicts:
#	tests/providers/aws/services/iam/iam_root_hardware_mfa_enabled/iam_root_hardware_mfa_enabled_test.py
MrCloudSec added a commit that referenced this pull request Aug 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport-to-v3 Backport PR to the v3 branch provider/aws Issues/PRs related with the AWS provider was-backported The PR was successfully backported to the target branch
Projects
None yet
Development

Successfully merging this pull request may close these issues.

check id "iam_root_hardware_mfa_enabled" PASS for virtual MFA device!
3 participants