Control: AWS > IAM > Role > Role Policy Attachments > Discovery

Resource Types

This control targets the following resource types:

• AWS > IAM > Role

Policies

The following policies can be used to configure this control:

• AWS > IAM > Role > Role Policy Attachments > CMDB

Permissions

Cloud permissions used by this control and its actions:

• iam:ListAttachedRolePolicies

Category

• CMDB

In Your Workspace

• Controls by Resource report
• Controls by Control Type report

Developers

Control Type URI

tmod:@turbot/aws-iam#/control/types/rolePolicyAttachmentDiscovery

Category URI

tmod:@turbot/turbot#/control/categories/cmdb

GraphQL

query controlType(id: "tmod:@turbot/aws-iam#/control/types/rolePolicyAttachmentDiscovery") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-iam#/control/types/rolePolicyAttachmentDiscovery'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-iam#/control/types/rolePolicyAttachmentDiscovery"