Control: AWS > IAM > User > Boundary

Configure which boundary policy to apply to the IAM user. This must be the name of an existing AWS IAM Boundary policy.

AWS Boundary Policies are used to enforce Turbot Guardrails for enabling/disabling API Services and Regions.

If set to Check or Enforce per AWS > Turbot > Permissions (the default), the boundary will be enforced if Turbot > Permissions are enforced, checked if Turbot > Permissions are checked, and skippped if Guardrails Permissions are none or skip

Resource Types

This control targets the following resource types:

AWS > IAM > User

Policies

The following policies can be used to configure this control:

AWS > IAM > User > Boundary

This control type relies on these other policies when running actions:

Permissions

Cloud permissions used by this control and its actions:

iam:PutUserPermissionsBoundary
iam:DeleteUserPermissionsBoundary

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws-iam#/control/types/userBoundary

Category URI

tmod:@turbot/turbot#/control/categories/iam

GraphQL

query controlType(id: "tmod:@turbot/aws-iam#/control/types/userBoundary") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-iam#/control/types/userBoundary'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-iam#/control/types/userBoundary"