Query: Ensure access to AWSCloudShellFullAccess is restricted

Description

This control checks whether the AWSCloudShellFullAccess policy is attached to any IAM user, group, or role. The control fails if the policy is attached to any IAM user, group, or role.

Query

Tables used in this query:

• aws_iam_group
• aws_iam_role
• aws_iam_user

Controls using this query:

• 1.22 Ensure access to AWSCloudShellFullAccess is restricted
• 1.22 Ensure access to AWSCloudShellFullAccess is restricted
• 1.22 Ensure access to AWSCloudShellFullAccess is restricted
• Ensure access to AWSCloudShellFullAccess is restricted

SQL