AliCloud Account ReportAliCloud ECS Disk Age ReportAliCloud ECS Disk DashboardAliCloud ECS Disk DetailAliCloud ECS Disk Encryption ReportAliCloud ECS Instance Age ReportAliCloud ECS Instance DashboardAliCloud ECS Instance DetailAliCloud ECS Instance Public Access ReportAliCloud ECS Security Group DashboardAliCloud ECS Security Group DetailAliCloud ECS Snapshot Age ReportAliCloud ECS Snapshot DashboardAliCloud ECS Snapshot DetailAliCloud Key Age ReportAliCloud Key DetailAliCloud KMS CMK Lifecycle ReportAliCloud KMS Key DashboardAliCloud OSS Bucket Age ReportAliCloud OSS Bucket DashboardAliCloud OSS Bucket DetailAliCloud OSS Bucket Encryption ReportAliCloud OSS Bucket Lifecycle ReportAliCloud OSS Bucket Logging ReportAliCloud OSS Bucket Public Access ReportAliCloud RAM Access Key Age ReportAliCloud RAM Credential ReportAliCloud RAM Group Age ReportAliCloud RAM Group DashboardAliCloud RAM Group DetailAliCloud RAM Policy DetailAliCloud RAM Role Age ReportAliCloud RAM Role DashboardAliCloud RAM Role DetailAliCloud RAM User Age ReportAliCloud RAM User DashboardAliCloud RAM User DetailAliCloud RAM User MFA ReportAliCloud RDS Instance Age ReportAliCloud RDS Instance DashboardAliCloud RDS Instance DetailAliCloud RDS Instance Public Access ReportAliCloud VPC DashboardAliCloud VPC DetailAliCloud VPC vSwitch Detail
Dashboard: AliCloud RAM Role Dashboard
This dashboard answers the following questions:
- How many roles are in each account?
- How many roles are without policies?
- How many roles are with administrator & cross-account access?
This dashboard contains 4 cards.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-alicloud-insightsStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select AliCloud RAM Role Dashboard dashboard.
You could also snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe dashboard run alicloud_insights.dashboard.ram_role_dashboard --shareQueries
This dashboard uses the the following queries:
with roles_with_cross_account_access as ( select distinct name as name from alicloud_ram_role, jsonb_array_elements(assume_role_policy_document -> 'Statement') as stmt, jsonb_array_elements_text(stmt -> 'Principal' -> 'RAM') as principal where split_part(principal, ':',4) <> account_id)select count(name) as value, 'With Cross-Account Access' as label, case when count(name) > 0 then 'alert' else 'ok' end as typefrom roles_with_cross_account_access;