AliCloud Account ReportAliCloud ECS Disk Age ReportAliCloud ECS Disk DashboardAliCloud ECS Disk DetailAliCloud ECS Disk Encryption ReportAliCloud ECS Instance Age ReportAliCloud ECS Instance DashboardAliCloud ECS Instance DetailAliCloud ECS Instance Public Access ReportAliCloud ECS Security Group DashboardAliCloud ECS Security Group DetailAliCloud ECS Snapshot Age ReportAliCloud ECS Snapshot DashboardAliCloud ECS Snapshot DetailAliCloud Key Age ReportAliCloud Key DetailAliCloud KMS CMK Lifecycle ReportAliCloud KMS Key DashboardAliCloud OSS Bucket Age ReportAliCloud OSS Bucket DashboardAliCloud OSS Bucket DetailAliCloud OSS Bucket Encryption ReportAliCloud OSS Bucket Lifecycle ReportAliCloud OSS Bucket Logging ReportAliCloud OSS Bucket Public Access ReportAliCloud RAM Access Key Age ReportAliCloud RAM Credential ReportAliCloud RAM Group Age ReportAliCloud RAM Group DashboardAliCloud RAM Group DetailAliCloud RAM Policy DetailAliCloud RAM Role Age ReportAliCloud RAM Role DashboardAliCloud RAM Role DetailAliCloud RAM User Age ReportAliCloud RAM User DashboardAliCloud RAM User DetailAliCloud RAM User MFA ReportAliCloud RDS Instance Age ReportAliCloud RDS Instance DashboardAliCloud RDS Instance DetailAliCloud RDS Instance Public Access ReportAliCloud VPC DashboardAliCloud VPC DetailAliCloud VPC vSwitch Detail
Dashboard: AliCloud RAM User Detail
This dashboard answers the following questions for each user:
- How is the user configured?
- What relationships does the user have with other resources?
- What tags are applied?
- How many access keys does the user have?
- How is the MFA configured?
- What groups are associated with the user?
- What are the policies associated with user?
This dashboard contains 2 cards, 1 flow, 1 graph, 1 input and 5 tables.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-alicloud-insightsStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select AliCloud RAM User Detail dashboard.
You could also snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe dashboard run alicloud_insights.dashboard.ram_user_detail --shareQueries
This dashboard uses the the following queries:
-- Policies (attached to groups)select p.title as "Policy", 'Group: ' || g.title as "Via"from alicloud_ram_user as u, alicloud_ram_policy as p, jsonb_array_elements(u.groups) as user_groups inner join alicloud_ram_group g on g.title = user_groups ->> 'GroupName', jsonb_array_elements(g.attached_policy) as group_policywhere group_policy ->> 'PolicyName' = p.title and u.arn = $1 and u.account_id = split_part($1,':',4)
-- Policies (attached to user)union select p.title as "Policy", 'Attached to User' as "Via"from alicloud_ram_user as u, jsonb_array_elements(u.attached_policy) as pol_arn, alicloud_ram_policy as pwhere pol_arn ->> 'PolicyName' = p.title and u.arn = $1 and u.account_id = split_part($1,':',4);