Control: AWS > Turbot > IAM > Managed

The control automates the creation of new IAM resources based on predefined IAM policies. Its primary function is to facilitate the initial setup of resources, without taking charge of subsequent updates or deletions.

Resource Types

This control targets the following resource types:

AWS > Account

Policies

The following policies can be used to configure this control:

AWS > Turbot > IAM > Managed

This control type relies on these other policies when running actions:

Permissions

Cloud permissions used by this control and its actions:

iam:DeleteGroupPolicy
iam:CreatePolicy
iam:CreateRole
iam:CreateUser
iam:CreateGroup

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws-iam#/control/types/iamTurbotManaged

Category URI

tmod:@turbot/turbot#/control/categories/iam

GraphQL

query controlType(id: "tmod:@turbot/aws-iam#/control/types/iamTurbotManaged") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-iam#/control/types/iamTurbotManaged'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-iam#/control/types/iamTurbotManaged"