Query: IAM policy should not grant full access to cloudtrail service

Description

CloudTrail is a critical service and IAM policies should follow least privilege model for this service in particular. This control is non-compliant if the managed IAM policy allows full access to cloudtrail service.

Query

Tables used in this query:

• aws_iam_policy

Controls using this query:

• IAM policy should not grant full access to cloudtrail service
• IAM policy should not grant full access to KMS service

SQL