Query: iam_roles_by_boundary_policy

select
  case
    when permissions_boundary_type is null or permissions_boundary_type = '' then 'not configured'
    else 'configured'
  end as policy_type,
  count(*)
from
  aws_iam_role
group by
  permissions_boundary_type;