Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ACM certificate expiry #524

Closed
cristiandley opened this issue Nov 14, 2022 · 0 comments
Closed

ACM certificate expiry #524

cristiandley opened this issue Nov 14, 2022 · 0 comments
Assignees
Labels
bug Something isn't working

Comments

@cristiandley
Copy link

cristiandley commented Nov 14, 2022

Describe the bug

acm_certificate_expires_30_days returns over >30 days certificates as an alarm.

Description in detail

AWS docs => ACM expiracy:

https://docs.aws.amazon.com/config/latest/developerguide/acm-certificate-expiration-check.html

The rule is NON_COMPLIANT if your certificates are about to expire.

MOD docs => acm_certificate_expires_30_days:

https://github.com/turbot/steampipe-mod-aws-compliance/blob/main/foundational_security/docs/foundational_security_acm_1.md

This control checks whether ACM certificates in your account are marked for expiration within 30 days

SOC2 specification => soc_2_cc_6_7:

CC6.7 The entity restricts the transmission, movement, and removal of information to authorized internal and external users and processes, and protects it during transmission, movement, or removal to meet the entity's objectives

https://docs.aws.amazon.com/config/latest/developerguide/acm-certificate-expiration-check.html

Steampipe version (steampipe -v)

latest

Plugin version (steampipe plugin list)
latest

To reproduce
run SOC2 test

Expected behavior
to pass controls >30 days

@cristiandley cristiandley added the bug Something isn't working label Nov 14, 2022
khushboo9024 pushed a commit that referenced this issue Nov 16, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants