Audit checks

Note

When you enable a check, data collection starts immediately. If there is a large amount of data in your account to collect, results of the check might not be available for some time after you enabled it.

The following audit checks are supported:

Intermediate CA revoked for active device certificates check
Revoked CA certificate still active
Device certificate shared
Device certificate key quality
CA certificate key quality
Unauthenticated Cognito role overly permissive
Authenticated Cognito role overly permissive
AWS IoT policies overly permissive
AWS IoT policy potentially misconfigured
Role alias overly permissive
Role alias allows access to unused services
CA certificate expiring
Conflicting MQTT client IDs
Device certificate expiring
Device certificate age check
Revoked device certificate still active
Logging disabled

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

Audit

Intermediate CA revoked for active device certificates check