{
    "name": "userWithPassNotContainMfaActive",
    "file": "passAndMFA.rego",
    "policy_type": "aws",
    "resource_type": "aws_iam_user_policy",
    "template_args": {
        "prefix": ""
    },
    "severity": "HIGH",
    "description": "It is recommended that MFA be enabled for all accounts that have a console password. Enabling MFA provides increased security for console access as it requires the authenticating principal to possess a device that emits a time-sensitive key and have knowledge of a credential",
    "reference_id": "AWS.IamUser.IAM.High.0389",
    "category": "Compliance Validation",
    "version": 1,
    "id": "AC_AWS_0151"
}