turbot/aws_compliance

Control: Ensure IAM policies are attached only to groups or roles

Description

By default, IAM users, groups, and roles have no access to AWS resources. IAM policies are the means by which privileges are granted to users, groups, or roles. It is recommended that IAM policies be applied directly to groups and roles but not users.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.iam_user_no_policies

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.iam_user_no_policies --share

SQL

This control uses a named query:

iam_user_no_policies

Tags