Checks/Aws/Test-IamRootHardwareMfaEnabled.ps1
|
function Test-IamRootHardwareMfaEnabled { <# .SYNOPSIS Root account has a hardware MFA device enabled .DESCRIPTION **AWS root user** credentials are assessed for **MFA status** and device type. The check detects whether MFA is absent or implemented with a **virtual device** instead of **hardware MFA** on the root user, and notes when centralized root credential management is in effect. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: iam_root_hardware_mfa_enabled [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check iam_root_hardware_mfa_enabled for reference.', 'N/A', 'iam Resources') } |