turbot/aws_compliance

Control: Ensure access to AWSCloudShellFullAccess is restricted

Description

This control checks whether the AWSCloudShellFullAccess policy is attached to any IAM user, group, or role. The control fails if the policy is attached to any IAM user, group, or role.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.iam_user_group_role_cloudshell_fullaccess_restricted

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.iam_user_group_role_cloudshell_fullaccess_restricted --share

SQL

This control uses a named query:

iam_user_group_role_cloudshell_fullaccess_restricted

Tags