iam_checks.py 文件源码

def test(self):
        if self.user_dict['password_enabled'] == 'true' :
            last_changed = dateutil.parser.parse(self.user_dict['password_last_changed'])
            now = datetime.datetime.utcnow().replace(tzinfo=last_changed.tzinfo)
            diff = now - last_changed
            delta = datetime.timedelta(
                days=config.config['PASSWORD_ROTATION_DAYS']
            )
            if diff > delta:
                self.reason = 'Password has not been changed in {0} days'.format(
                    delta.days
                )
                self.status = common.CheckState.FAIL
            else:
                self.status = common.CheckState.PASS
        elif self.user_dict['password_last_changed'] == 'not_supported':
            self.reason = 'password_last_changed field is not supported'
            self.status = common.CheckState.ERROR
        else:
            self.reason = 'Password is not enabled'
            self.status = common.CheckState.PASS