From a0625dff2fa4f66bfa4f11b568962e539660af52 Mon Sep 17 00:00:00 2001
From: Nacho Rivera <59198746+n4ch04@users.noreply.github.com>
Date: Wed, 2 Nov 2022 10:00:25 +0100
Subject: [PATCH] fix(extra71): Modified wrong remediation (#1445)

---
 checks/check_extra71 | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/checks/check_extra71 b/checks/check_extra71
index acb05f9f72..5025571289 100644
--- a/checks/check_extra71
+++ b/checks/check_extra71
@@ -21,8 +21,8 @@ CHECK_ALTERNATE_check71="extra71"
 CHECK_ALTERNATE_check701="extra71"
 CHECK_ASFF_COMPLIANCE_TYPE_extra71="ens-op.exp.10.aws.trail.2"
 CHECK_SERVICENAME_extra71="iam"
-CHECK_RISK_extra71='Policy "may" allow Anonymous users to perform actions.'
-CHECK_REMEDIATION_extra71='Ensure this repository and its contents should be publicly accessible.'
+CHECK_RISK_extra71='Any user with AdministratorAccess is allowed to perform any action on an AWS account, so it needs to have a multi factor authentication enabled to avoid impersonation through a potential credentials leak'
+CHECK_REMEDIATION_extra71='Enable MFA for users belonging to groups with AdministratorAccess policies'
 CHECK_DOC_extra71='https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_virtual.html'
 CHECK_CAF_EPIC_extra71='Infrastructure Security'