From a43c1aceecfa4be4d0c48506671c9e738dd248f0 Mon Sep 17 00:00:00 2001 From: Pepe Fagoaga Date: Tue, 26 Jul 2022 20:37:35 +0200 Subject: [PATCH] fix(check12): Improve remediation (#1281) --- checks/check12 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/checks/check12 b/checks/check12 index f2b5d9201f..4d85d21401 100644 --- a/checks/check12 +++ b/checks/check12 @@ -22,7 +22,7 @@ CHECK_ALTERNATE_check102="check12" CHECK_ASFF_COMPLIANCE_TYPE_check12="ens-op.acc.5.aws.iam.1" CHECK_SERVICENAME_check12="iam" CHECK_RISK_check12='Unauthorized access to this critical account if password is not secure or it is disclosed in any way.' -CHECK_REMEDIATION_check12='Enable MFA for root account. MFA is a simple best practice that adds an extra layer of protection on top of your user name and password. Recommended to use hardware keys over virtual MFA.' +CHECK_REMEDIATION_check12='Enable MFA for all IAM users that have a console password. MFA is a simple best practice that adds an extra layer of protection on top of your user name and password. Recommended to use hardware keys over virtual MFA.' CHECK_DOC_check12='https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_virtual.html' CHECK_CAF_EPIC_check12='IAM'