[global] timeout = 120 mfa = true excluded_users = arghhh,helpme [passwords] max_age_days = 30 [access_keys] max_age_days = 30 [iam] expected_policies = test,someotherpolicy