Query: 1.16 Ensure RAM policies are attached only to groups or roles

Description

By default, RAM users, groups, and roles have no access to Alibaba Cloud resources. RAM policies are the means by which privileges are granted to users, groups, or roles. It is recommended that RAM policies be applied directly to groups and roles but not users.

Query

Tables used in this query:

• alicloud_ram_user

Controls using this query:

• 1.16 Ensure RAM policies are attached only to groups or roles

SQL