aws-cloudhsm-cred-authenticates-hsm-user
match (record)
{
"field": "Username",
"resource_type": "CloudHSM::HsmUserCredential"
}
emit
| source | <HSM CU/CO login/PIN node (Secret/Credential)> |
|---|---|
| target | <HSM user identity node (Identity / MachineIdentity)> |
Narrative
Login {cred.name} authenticates as CloudHSM user identity {hsm_user.name} ({usertype}).
Raw rule rules/explicit/aws-cloudhsm.yaml
id: aws-cloudhsm-cred-authenticates-hsm-user
emits: CredentialsFor
applies_to:
- aws
match_record:
resource_type: CloudHSM::HsmUserCredential
field: Username
emit:
source: <HSM CU/CO login/PIN node (Secret/Credential)>
target: <HSM user identity node (Identity / MachineIdentity)>
api_source: host config / SDK pin (CLOUDHSM_PIN, PKCS#11 pin, cloudhsm_mgmt_util config)
evidence_field: Username / UserType (CU|CO|PCO|AU)
narrative: Login {cred.name} authenticates as CloudHSM user identity {hsm_user.name} ({usertype}).