Query: IAM roles that have not been used in 60 days should be removed

Description

This control checks whether the IAM role has been used in 60 days. Unused accounts and roles increase the attack surface area.

Query

Tables used in this query:

• aws_iam_role

Controls using this query:

• IAM roles that have not been used in 60 days should be removed

SQL