Query: iam_boundary_policy_for_role

select
  case
    when permissions_boundary_type is null then 'Not set'
    when permissions_boundary_type = '' then 'Not set'
    else substring(
      permissions_boundary_arn,
      'arn:aws:iam::\d{12}:.+\/(.*)'
    )
  end as value,
  'Boundary Policy' as label,
  case
    when permissions_boundary_type is null then 'alert'
    when permissions_boundary_type = '' then 'alert'
    else 'ok'
  end as type
from
  aws_iam_role
where
  arn = $1