certificate_with_auto_renew_enablediam_access_group_with_public_accessiam_account_owner_no_api_keyiam_restrict_api_key_service_id_creationiam_support_center_access_group_configurediam_user_api_key_age_90iam_user_member_of_only_access_groupiam_user_mfa_enabled_alliam_user_with_valid_emailiam_user_with_valid_phoneinternet_service_ddos_protection_activeinternet_service_tls_higher_version_enabledinternet_service_waf_enabledmanual_controlobject_storage_bucket_with_cmkobject_storage_bucket_with_key_protect_enabledvpc_network_acl_restrict_ingress_rdp_allvpc_network_acl_restrict_ingress_ssh_allvpc_security_group_restrict_ingress_rdp_allvpc_security_group_restrict_ingress_ssh_all
Query: iam_account_owner_no_api_key
Usage
powerpipe query ibm_compliance.query.iam_account_owner_no_api_key
Steampipe Tables
SQL
select acc.guid as resource, case when count(key.iam_id) > 0 then 'alarm' else 'ok' end as status, case when count(key.iam_id) > 0 then 'Account owner API keys exist.' else 'No account owner API keys exist.' end as reason, acc.guidfrom ibm_account as acc, ibm_iam_api_key as keywhere acc.owner_unique_id = split_part(key.iam_id, '-', 2)group by acc.guid;
Controls
The query is being used by the following controls: