Table: alicloud_ram_group

A RAM group is a collection of RAM users. Groups let you specify permissions for multiple users, which makes it easier to manage the permissions for those users.

Examples

User details associated with each RAM group

select
  name as group_name,
  iam_user ->> 'UserName' as user_name,
  iam_user ->> 'DisplayName' as display_name,
  iam_user ->> 'JoinDate' as user_join_date
from
  alicloud_ram_group
  cross join jsonb_array_elements(users) as iam_user;

List the policies attached to each RAM group

select
  name as group_name,
  policies ->> 'PolicyName' as policy_name,
  policies ->> 'PolicyType' as policy_type,
  policies ->> 'DefaultVersion' as policy_default_version,
  policies ->> 'AttachDate' as policy_attachment_date
from
  alicloud_ram_group,
  jsonb_array_elements(attached_policy) as policies;

List of RAM groups with no users added to it

select
  name as group_name,
  create_date,
  users
from
  alicloud_ram_group
where
  users = '[]';

Query examples

.inspect alicloud_ram_group

Resource Access Management groups who can login via the console or access keys.

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The Alicloud Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
arn	text	The Alibaba Cloud Resource Name (ARN) of the RAM user group.
attached_policy	jsonb	A list of policies attached to a RAM user group.
comments	text	The description of the RAM user group.
create_date	timestamp with time zone	The time when the RAM user group was created.
name	text	The name of the RAM user group.
region	text	The Alicloud region in which the resource is located.
title	text	Title of the resource.
update_date	timestamp with time zone	The time when the RAM user group was modified.
users	jsonb	A list of users in the group.

turbot/alicloud