| 🛡️ AWS Account does not have an IAM Password Policy🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS Account IAM Password Policy minimum password length is 14 characters or less🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS Account IAM Password Policy Number of passwords to remember is not set to 24🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS Account Root User credentials were used is the last 30 days🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS Account Root User has active access keys🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS Account Root User signing certificates are active🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS Cognito User Pool Password Policy is not strong🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS IAM Access Key is unused🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS IAM SSH Public Key are not rotated every 90 days or less🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS IAM User Access Keys are not rotated every 90 days or less🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS IAM User has more than one active access key🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS IAM User has more than one active SSH public key🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS IAM User has no active credentials🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS IAM User with console and programmatic access set during the initial creation🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ AWS IAM User with credentials unused for 45 days or more is not disabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS RDS Cluster has a common master username🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS RDS Instance has a common master username🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google API Key is not restricted for unspecified hosts and apps🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Google API Key is not restricted for unused APIs🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google IAM Service Account has User-Managed Keys🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google Project has API Keys🟢 | 1 | 🟠 x1, 🟢 x5 | no data |
| 🛡️ Microsoft Entra ID Account Lockout Duration is not set 60 seconds or more🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Microsoft Entra ID Account Lockout Threshold is not set to 10 or less🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Microsoft Entra ID Custom Banned Password List is not enforced🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Microsoft Entra ID User Notify All Admins When Other Admins Reset Their Password is set No🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Microsoft Entra ID User Notify Users On Password Resets is set to No🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Microsoft Entra ID User Reconfirm Authentication Information is set to 0🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Microsoft Entra ID User Self-Service Password Reset does not require 2 authentication methods🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Oracle IAM Administrator User has an active API key🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Oracle IAM Auth Tokens are not rotated every 90 days🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Oracle IAM Customer Secret Keys are not rotated every 90 days🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Oracle IAM DB Credentials are not rotated every 90 days🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Oracle IAM Domain Password Policy has weak complexity requirements🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Oracle IAM User API keys are not rotated every 90 days🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Oracle IAM User has more than one active API key🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Snowflake User password is not rotated every 90 days🟢 | 1 | 🟢 x6 | no data |