Control: IAM roles that have not been used in 60 days should be removed
Description
This control checks whether the IAM role has been used in 60 days. Unused accounts and roles increase the attack surface area.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.iam_role_unused_60Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.iam_role_unused_60 --shareSQL
This control uses a named query:
iam_role_unused_60