turbot/aws_compliance

Control: IAM roles that have not been used in 60 days should be removed

Description

This control checks whether the IAM role has been used in 60 days. Unused accounts and roles increase the attack surface area.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.iam_role_unused_60

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.iam_role_unused_60 --share

SQL

This control uses a named query:

iam_role_unused_60

Tags