Query: IAM user should not have any inline or attached policies

Description

This rule ensures AWS Identity and Access Management (IAM) policies are attached only to groups or roles to control access to systems and assets.

Query

Tables used in this query:

• aws_iam_user

Controls using this query:

• 1.15 Ensure IAM Users Receive Permissions Only Through Groups
• 1.15 Ensure IAM Users Receive Permissions Only Through Groups
• 1.15 Ensure IAM Users Receive Permissions Only Through Groups
• 1.15 Ensure IAM Users Receive Permissions Only Through Groups
• 1.15 Ensure IAM Users Receive Permissions Only Through Groups
• 1.15 Ensure IAM Users Receive Permissions Only Through Groups
• 2 IAM users should not have IAM policies attached
• IAM user should not have any inline or attached policies

SQL