Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

hopefully last edit for the PR, rules needed to be changed to reflect… #264

Merged
merged 1 commit into from
Dec 10, 2024
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions bosh/opsfiles/rules.yml
Original file line number Diff line number Diff line change
Expand Up @@ -43,29 +43,29 @@
name: aws-iam-check-keys
rules:
- alert: OperatorsStaleKeyWarning
expr: last_rotated_days{user_type="Operator"} >= 75 and last_rotated_days{user_type="Operator"} < 90
expr: last_rotated_days{user_type="Operator"} >= 300 and last_rotated_days{user_type="Operator"} < 360
labels:
service: aws-iam
severity: warning
annotations:
summary: IAM key for {$labels.user} will be expired within the next 15 days
summary: IAM key for {$labels.user} will be expired within the next 60 days
description: "For Operators if the expiration is within 15 days\n"
- alert: PlatformApplicationStaleKeyWarning
expr: last_rotated_days{user_type="Platform"} >= 80 and last_rotated_days{user_type="Platform"} < 165 or last_rotated_days{user_type="Application"} >= 80 and last_rotated_days{user_type="Application"} < 165
expr: last_rotated_days{user_type="Platform"} >= 300 and last_rotated_days{user_type="Platform"} < 360 or last_rotated_days{user_type="Application"} >= 300 and last_rotated_days{user_type="Application"} < 360
labels:
severity: warning
annotations:
summary: IAM key for Platform or Application {$labels.user} will be expired within the next 15 days
summary: IAM key for Platform or Application {$labels.user} will be expired within the next 60 days
description: "For Platform or Applications if the expiration is within 85 days\n"
- alert: OperatorsStaleKeyViolation
expr: last_rotated_days{user_type="Operator"} >= 90
expr: last_rotated_days{user_type="Operator"} >= 360
labels:
severity: critical
annotations:
summary: IAM key for {$labels.user} is now expired
description: "For Operators if the key is expired\n"
- alert: PlatformApplicationStaleKeyViolation
expr: last_rotated_days{user_type="Platform"} >= 165 or last_rotated_days{user_type="Application"} >= 165
expr: last_rotated_days{user_type="Platform"} >= 360 or last_rotated_days{user_type="Application"} >= 360
labels:
severity: critical
annotations:
Expand Down
Loading