Control: Ensure IAM policies are attached only to groups or roles
Description
By default, IAM users, groups, and roles have no access to AWS resources. IAM policies are the means by which privileges are granted to users, groups, or roles. It is recommended that IAM policies be applied directly to groups and roles but not users.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.iam_user_no_policies
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.iam_user_no_policies --share
SQL
This control uses a named query:
iam_user_no_policies