Checks/Aws/Test-OrganizationsDelegatedAdministrators.ps1
|
function Test-OrganizationsDelegatedAdministrators { <# .SYNOPSIS AWS Organization has only trusted delegated administrators .DESCRIPTION **AWS Organizations delegated administrators** are compared against a predefined **trusted list** to identify delegations that are not explicitly approved. The evaluation also notes when no delegated administrators exist. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: organizations_delegated_administrators [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check organizations_delegated_administrators for reference.', 'N/A', 'organizations Resources') } |