Rule: Ensure credentials unused for 180 days are disabled

Rule Description:

Troubleshooting Steps:

2. 1.
   Identify all active credentials within the Cloud Defense platform.
4. 2.
   Determine the last time each credential was used.
6. 3.
   Compare the last usage date with the current date.
8. 4.
   Identify any credentials that have been unused for 180 days or longer.
10. 5.
    Disable the identified credentials to prevent potential security risks.

Necessary Codes:

Step-by-step Guide for Remediation:

2. 1.

   Login to the Cloud Defense platform using your administrator credentials.

4. 2.

   Navigate to the "Credentials Management" section or similar in the Cloud Defense platform. This may vary depending on the platform or service provider.

6. 3.

   Obtain a list of all active credentials within the Cloud Defense platform.

8. 4.

   For each credential in the list, perform the following steps:

   Step 4.1: Determine the last time the credential was used.

   • Check the logs or usage history of the credential.
   • Note down the last usage date.

   Step 4.2: Compare the last usage date with the current date.

   • Calculate the number of days between the last usage date and the current date.

   Step 4.3: Identify credentials that have been unused for 180 days or longer.

   • If the number of days calculated in Step 4.2 is 180 or greater, mark the credential as eligible for disabling.

   Step 4.4: Disable the identified credentials.

   • Use the appropriate command in the Cloud Defense platform to disable the credential.
   • This command may vary depending on the platform or service provider.
10. 5.

    Repeat Steps 4.1 to 4.4 for all credentials in the list.

12. 6.

    Verify that the identified credentials have been successfully disabled.

14. 7.

    Document the disabled credentials and the actions taken for future reference.