Get Involved
Query: IAM policy should not grant full access to KMS service
Description
KMS is a critical service and IAM policies should follow least privilege model for this service in particular. This control is non-compliant if the managed IAM policy allows full access to KMS service.
Query
Tables used in this query:
Controls using this query: