Control: AWS > IAM > Credential Report > CMDB

Record and synchronize details for the AWS IAM credential report into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

This control will automatically re-run every 6 hours to generate a credential report.

Resource Types

This control targets the following resource types:

AWS > IAM > Credential Report

Policies

The following policies can be used to configure this control:

AWS > IAM > Credential Report > CMDB

Permissions

Cloud permissions used by this control and its actions:

iam:GenerateCredentialReport
iam:GetCredentialReport

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws-iam#/control/types/credentialReportCmdb

Category URI

tmod:@turbot/turbot#/control/categories/cmdb

GraphQL

query controlType(id: "tmod:@turbot/aws-iam#/control/types/credentialReportCmdb") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-iam#/control/types/credentialReportCmdb'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-iam#/control/types/credentialReportCmdb"