ServiceNow CMDB CI relationship sync: faster, more complete →
Turbot Guardrails Hub 
Hub
Mods
Turbot
5
Mods
30
Resource Types
133
Policies
33
Controls
0
Quick Actions
0
IAM

Policy: Turbot > IAM > Profile > Expiration

Check if a profile has expired and provide a configurable warning period before deactivation. After profile dectivation, any active access keys linked to the profile will no longer be treated as active. To reactivate a profile, a user simply needs to log into the Turbot Console again via their Directory source.

Resource Types

This policy targets the following resource types:

Controls

Policy Specification

Schema Type
string
Default
Skip
Valid Values [YAML]
  • Skip

  • Check: Not expired

  • Check: Does not expire in next 1 day

  • Check: Does not expire in next 3 days

  • Check: Does not expire in next 7 days

  • Check: Does not expire in next 14 days

  • Check: Does not expire in next 30 days

  • Check: Does not expire in next 60 days

  • Check: Does not expire in next 90 days

  • Enforce: Deactivate expired

  • Enforce: Deactivate expired with 1 day warning

  • Enforce: Deactivate expired with 3 days warning

  • Enforce: Deactivate expired with 7 days warning

  • Enforce: Deactivate expired with 14 days warning

  • Enforce: Deactivate expired with 30 days warning

  • Enforce: Deactivate expired with 60 days warning

  • Enforce: Deactivate expired with 90 days warning

  • Enforce: Delete expired

  • Enforce: Delete expired with 1 day warning

  • Enforce: Delete expired with 3 days warning

  • Enforce: Delete expired with 7 days warning

  • Enforce: Delete expired with 14 days warning

  • Enforce: Delete expired with 30 days warning

  • Enforce: Delete expired with 60 days warning

  • Enforce: Delete expired with 90 days warning
Examples [YAML]
  • Check: Does not expire in next 7 days

Category

In Your Workspace

Developers