Control: AWS > IAM > Role > Discovery
Discover all AWS IAM role resources and add them to the CMDB.
The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.
Resource Types
This control targets the following resource types:
Policies
The following policies can be used to configure this control:
Permissions
Cloud permissions used by this control and its actions:
iam:ListRoles
Category
In Your Workspace
Developers
- tmod:@turbot/aws-iam#/control/types/roleDiscovery
- tmod:@turbot/turbot#/control/categories/cmdbDiscovery
- turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-iam#/control/types/roleDiscovery"
Get Controls
Control Type URI
Category URI
GraphQL
CLI