AWS Compliance mod v1.5.0 - Added iam_user_access_key_age_365 and secretsmanager_secret_rotation_enabled controls to all_controls_iam and all_controls_secretsmanager benchmarks respectively

May 07, 2025powerpipe

Dependencies

  • AWS plugin v1.12.0 or higher is now required. (#882)

What's new?

  • Added iam_user_access_key_age_365 and secretsmanager_secret_rotation_enabled controls to all_controls_iam and all_controls_secretsmanager benchmarks respectively. (#886)
  • Refactored GuardDuty queries to skip regions where GuardDuty is not available. (#882)

Bug fixes

  • Fixed eks_cluster_secrets_encrypted query to automatically return ok instead of an alarm for EKS clusters with version greater than 1.27 since they are automatically encrypted by AWS owned KMS keys. (#883)