ServiceNow CMDB CI relationship sync: faster, more complete →
Turbot Guardrails Hub 
Hub
Mods
Turbot
5
Mods
30
Resource Types
133
Policies
33
Controls
0
Quick Actions
0
IAM

Policy: Turbot > IAM > Access Key > Expiration

Check if the access key has expired and provide a configurable warning period before enforcement.

Deactivate expired will deactivate the key on the expiration day.

Delete expired will delete the key on the expiration day.

During the warning period, this control will be in Alarm, but the access key remains enabled and functional.

Resource Types

This policy targets the following resource types:

Controls

Policy Specification

Schema Type
string
Default
Skip
Valid Values [YAML]
  • Skip

  • Check: Not expired

  • Check: Does not expire in next 1 day

  • Check: Does not expire in next 3 days

  • Check: Does not expire in next 7 days

  • Check: Does not expire in next 14 days

  • Check: Does not expire in next 30 days

  • Check: Does not expire in next 60 days

  • Check: Does not expire in next 90 days

  • Enforce: Deactivate expired

  • Enforce: Deactivate expired with 1 day warning

  • Enforce: Deactivate expired with 3 days warning

  • Enforce: Deactivate expired with 7 days warning

  • Enforce: Deactivate expired with 14 days warning

  • Enforce: Deactivate expired with 30 days warning

  • Enforce: Deactivate expired with 60 days warning

  • Enforce: Deactivate expired with 90 days warning

  • Enforce: Delete expired

  • Enforce: Delete expired with 1 day warning

  • Enforce: Delete expired with 3 days warning

  • Enforce: Delete expired with 7 days warning

  • Enforce: Delete expired with 14 days warning

  • Enforce: Delete expired with 30 days warning

  • Enforce: Delete expired with 60 days warning

  • Enforce: Delete expired with 90 days warning
Examples [YAML]
  • Enforce: Delete expired with 7 days warning

Category

In Your Workspace

Developers