Merge pull request #1 from noose/main

Fixed condition for Cloudwatch.3-ConsoleSigninWithoutMFA
lincolnloop · May 6, 2024 · 9480785 · 9480785
2 parents 66903d5 + 96e8318
commit 9480785
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/variables.tf b/variables.tf
@@ -30,7 +30,7 @@ variable "alarms" {
     }
     "Cloudwatch.3-ConsoleSigninWithoutMFA" = {
       description = "Cloudwatch.3 - Ensure a log metric filter and alarm exist for AWS Management Console sign-in without MFA "
-      pattern     = "{($.eventName=\"ConsoleLogin\") && ($.additionalEventData.MFAUsed !=\"Yes\") && && ($.userIdentity.type = \"IAMUser\") && ($.responseElements.ConsoleLogin = \"Success\")}"
+      pattern     = "{($.eventName=\"ConsoleLogin\") && ($.additionalEventData.MFAUsed !=\"Yes\") && ($.userIdentity.type = \"IAMUser\") && ($.responseElements.ConsoleLogin = \"Success\")}"
     }
     "CloudWatch.4-IAMPolicyChanges" = {
       description = "Cloudwatch.4 - Ensure a log metric filter and alarm exist for IAM policy changes"