Sends a report of IAM users which have Admin access. Administrator access should be given to trusted users only.

Checks if a log metric filter and alarm exist for disabling or scheduled deletion of customer created CMKs

Checks if AWS config configuration recorder not enabled

Checks for log metric filter and Management Console sign-in without MFA alarm in your aws account

Checks if a log metric filter and alarm exist for changes to network gateways

Checks if IAM password policy require expire passwords within 90 days

Checks if a log metric filter and alarm exist for VPC changes

Ensure credentials unused for 90 days or greater are disabled

Checks if IAM password policy prevents password reuse

Checks if IAM password policy require at least one number

Checks if CloudTrail trails are integrated with CloudWatch Logs

checks if a log metric filter and alarm exist for security group changes

Checks if IAM password policy require min length of 14

Ensure console credentials are rotated every 90 days or less

checks if a log metric filter and alarm exist for AWS Config configuration changes