Query: Ensure managed IAM policies should not allow blocked actions on KMS keys

Description

Checks if the managed AWS Identity and Access Management (IAM) policies that you create do not allow blocked actions on AWS KMS keys. The rule is non - compliant if any blocked action is allowed on AWS KMS keys by the managed IAM policy.

Query

Tables used in this query:

• aws_iam_policy

Controls using this query:

• Ensure managed IAM policies should not allow blocked actions on KMS keys

SQL