felipekiko

policies:

  - name: s3-check-with-public-access
    resource: aws.s3
    comment: Checks if has some S3 bucket with public access
    filters:
      - or:
        - type: global-grants
        - type: cross-account
          everyone_only: true

felipekiko

policies:

  - name: IAM-AccessKeys-Older-90-Days
    comment: Checks if exists some Access Key older than 90 days
    resource: aws.iam-user
    filters:
      - type: access-key
        key: Status
        value: Active
      - type: access-key