Control: AWS > Turbot > IAM > Managed

Resource Types

This control targets the following resource types:

• AWS > Account

Policies

The following policies can be used to configure this control:

• AWS > Turbot > IAM > Managed

This control type relies on these other policies when running actions:

• AWS > Turbot > Permissions > Policy > Name Path
• AWS > Turbot > Permissions > Policy > Name Prefix
• AWS > Turbot > Permissions > Role > Name Path
• AWS > Turbot > Permissions > Group > Name Path
• AWS > Turbot > Permissions > User > Name Path
• AWS > Turbot > Permissions > Compiled > Account Permissions
• AWS > Turbot > Permissions > Compiled > Allow Statements
• AWS > Turbot > Permissions > Compiled > API Boundary
• AWS > Account > Permissions > Support Level
• AWS > Turbot > Permissions > Group > Name Prefix
• AWS > Turbot > Permissions > Compiled > Levels
• AWS > Turbot > Permissions > Compiled > Lockdown Statements
• AWS > Turbot > Permissions > Superuser Boundary
• AWS > Turbot > Permissions > User Boundary
• AWS > Turbot > Permissions > Lockdown > Region Boundary
• AWS > Turbot > Permissions > Role > Name Prefix
• AWS > Turbot > Permissions > Role > Tags
• AWS > Turbot > Permissions > Compiled > Service Permissions
• AWS > Turbot > Permissions > User > Tags
• AWS > Turbot > Permissions > Policy > Tags
• AWS > IAM > Login User Names

Permissions

Cloud permissions used by this control and its actions:

• iam:DeleteGroupPolicy
• iam:CreatePolicy
• iam:TagPolicy
• iam:CreateRole
• iam:CreateUser
• iam:CreateGroup

Category

• IAM

In Your Workspace

• Controls by Resource report
• Controls by Control Type report

Developers

Control Type URI

tmod:@turbot/aws-iam#/control/types/iamTurbotManaged

Category URI

tmod:@turbot/turbot#/control/categories/iam

GraphQL

query controlType(id: "tmod:@turbot/aws-iam#/control/types/iamTurbotManaged") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-iam#/control/types/iamTurbotManaged'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-iam#/control/types/iamTurbotManaged"