Checks/Aws/Test-RdsInstanceCertificateExpiration.ps1
|
function Test-RdsInstanceCertificateExpiration { <# .SYNOPSIS RDS instance SSL/TLS certificate has more than 3 months of validity remaining .DESCRIPTION **RDS DB instances** are evaluated for **server certificate validity** windows, including default and **customer-managed certificates**. Certificates **expired** or **approaching expiration** (e.g., `<1 month`, `<3 months`, `3-6 months`, `>6 months`) are identified using the certificate `valid_till` date. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: rds_instance_certificate_expiration [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check rds_instance_certificate_expiration for reference.', 'N/A', 'rds Resources') } |