Query: 1.4 Restrict user API key creation and service ID creation in the account via IAM roles

Description

Use IAM settings to restrict user API key creation and service ID (and related API key) creation in the account. Enable both settings to restrict all users in the account from creating user API keys and service IDs except those with an IAM policy that explicitly allows it.

Query

Tables used in this query:

• ibm_iam_account_settings

Controls using this query:

• 1.4 Restrict user API key creation and service ID creation in the account via IAM roles

SQL