-
Notifications
You must be signed in to change notification settings - Fork 1.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(iam): update logic of Root Hardware MFA check #4726
fix(iam): update logic of Root Hardware MFA check #4726
Conversation
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #4726 +/- ##
==========================================
- Coverage 89.10% 89.06% -0.04%
==========================================
Files 913 913
Lines 27913 27912 -1
==========================================
- Hits 24871 24859 -12
- Misses 3042 3053 +11 ☔ View full report in Codecov by Sentry. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for your job! 👏
💚 All backports created successfully
Questions ?Please refer to the Backport tool documentation and see the Github Action logs for details |
(cherry picked from commit e658125) # Conflicts: # tests/providers/aws/services/iam/iam_root_hardware_mfa_enabled/iam_root_hardware_mfa_enabled_test.py
(cherry picked from commit e658125)
Context
Fix #4652
Description
Update logic of
iam_root_hardware_mfa_enabled
check so if the ARN of the associated IAM user of the Virtual MFA device is "arn:aws:iam::[aws-account-id]:root", the AWS root account is not using a hardware-based MFA device for MFA protection.Checklist
License
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.