---
inputType: "CA10__CaAwsAccount__c"
testData:
  - file: test-data.json
conditions:
  - status: "INCOMPLIANT"
    currentStateMessage: "The account does not have a password policy that requires passwords\
      \ to be at least 14 characters long."
    remediationMessage: "Create or update the password policy to require passwords\
      \ to be at least 14 characters."
    check:
      RELATED_LIST_HAS:
        relationshipName: "CA10__AWS_IAM_Password_Policies__r"
        status: "INCOMPLIANT"
otherwise:
  status: "COMPLIANT"
  currentStateMessage: "The account has a password policy that requires passwords\
    \ to be at least 14 characters long."
relatedLists:
  - relationshipName: "CA10__AWS_IAM_Password_Policies__r"
    importExtracts:
      - file: /types/CA10__CaAwsPasswordPolicy__c/object.extracts.yaml
    conditions:
      - status: "INCOMPLIANT"
        currentStateMessage: "The password policy requires fewer than 14 characters."
        remediationMessage: "Increase the minimum password length to at least 14 characters."
        check:
          LESS_THAN:
            left:
              EXTRACT: "CA10__minimumPasswordLength__c"
            right:
              NUMBER: 14.0
    otherwise:
      status: "COMPLIANT"
      currentStateMessage: "The password policy requires passwords to be at least 14 characters long."