You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Additional context
Add any other context about the problem here.
The policy worked as intended. However, it errored with message which seems to be transient error:
Action error (action update): tmod:@turbot/aws-iam#/action/types/userDeleteLoginProfile: Login Profile for User turbottest-user cannot be modified while login profile is being created.
Steps to recreate:
Set the policy to "Enforce: Delete login profile".
Enable the console login for an existing IAM user.
When I re-ran the control after a little bit, it worked as expected.
The text was updated successfully, but these errors were encountered:
Control objective
A clear and concise description of what the control objective is and why it's important.
Remediation
The remediation action(s) to satisfy the control objective.
This is achievable using the direct policy - https://hub.guardrails.turbot.com/mods/aws/policies/aws-iam/userLoginProfile
If you set the policy to "Enforce: Delete login profile", the Console access will be disabled for the IAM user(s). This does not affect the root user.
Categories
Proposed primary category and categories from the available list of categories.
Additional context
Add any other context about the problem here.
The policy worked as intended. However, it errored with message which seems to be transient error:
Action error (action update): tmod:@turbot/aws-iam#/action/types/userDeleteLoginProfile: Login Profile for User turbottest-user cannot be modified while login profile is being created.
Steps to recreate:
The text was updated successfully, but these errors were encountered: