Pipeline: Correct IAM users with unused login profile from 90 days or more

Runs corrective action to delete IAM users login profile that have been unused for 90 days or more.

Run the pipeline

To run this pipeline from your terminal:

flowpipe pipeline run aws_compliance.pipeline.correct_iam_users_with_unused_login_profile_90_days \
  --arg 'items=<list(object({
      title                         = string
      user_name                     = string
      password_last_used            = string
      password_last_used_in_days    = string
      password_last_changed_in_days = string
      password_last_changed         = string
      account_id                    = string
      conn                          = string
    }))>'

Use this pipeline

To call this pipeline from your pipeline, use a step:

step "pipeline" "step_name" {
  pipeline = aws_compliance.pipeline.correct_iam_users_with_unused_login_profile_90_days  
  args = {
    items = <list(object({
      title                         = string
      user_name                     = string
      password_last_used            = string
      password_last_used_in_days    = string
      password_last_changed_in_days = string
      password_last_changed         = string
      account_id                    = string
      conn                          = string
    }))>
  }
}

Triggers

Detect & correct IAM users with unused login profile from 90 days or more

Params

Name	Type	Required	Description	Default
items	list(object({ title = string user_name = string password_last_used = string password_last_used_in_days = string password_last_changed_in_days = string password_last_changed = string account_id = string conn = string }))	Yes	A collection of detected resources to run corrective actions against.	-
notifier	notifier	Yes	The name of the notifier to use for sending notification messages.	`notifier.default`
notification_level	string `verbose`, `info`, `error`	Yes	The verbosity level of notification messages to send.	`info`
approvers	list(notifier)	Yes	List of notifiers to be used for obtaining action/approval decisions.	`notifier.default`
default_action	string `notify`, `skip`, `delete_user_login_profile_unused_90_days`	Yes	The default action to use when there are no approvers.	`notify`
enabled_actions	list(string) `skip`, `delete_user_login_profile_unused_90_days`	Yes	The list of enabled actions approvers can select.	`[ "skip", "delete_user_login_profile_unused_90_days" ]`

Outputs

This pipeline has no outputs.

Pipeline: Correct IAM users with unused login profile from 90 days or more

Run the pipeline

Use this pipeline

Triggers

Params

Outputs

Tags