Control: AWS > Turbot > IAM > Role > Managed

The control ensures that Turbot-managed roles are accurately maintained, including updates and deletions as necessary. This control is key to managing role-based access controls, including the attachment of policies to roles and the enforcement of lockdown, deny, and boundary policy attachments.

Resource Types

This control targets the following resource types:

AWS > IAM > Role

Policies

This control type relies on these other policies when running actions:

Permissions

Cloud permissions used by this control and its actions:

iam:DeleteRole
iam:DeleteRolePolicy
iam:DetachRolePolicy
iam:PutRolePermissionsBoundary
iam:DeleteRolePermissionsBoundary
iam:AttachRolePolicy
iam:DetachRolePolicy
iam:UntagRole
iam:TagRole
iam:UpdateAssumeRolePolicy

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws-iam#/control/types/iamTurbotRoleManaged

Category URI

tmod:@turbot/turbot#/control/categories/iam

GraphQL

query controlType(id: "tmod:@turbot/aws-iam#/control/types/iamTurbotRoleManaged") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-iam#/control/types/iamTurbotRoleManaged'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-iam#/control/types/iamTurbotRoleManaged"