Query: iam_groups_without_users_count

select
  count(*) as value,
  'Without Users' as label,
  case
    when count(*) = 0 then 'ok'
    else 'alert'
  end as type
from
  aws_iam_group
where
  users is null;