Policy: AWS > IAM > Role > Role Policy Attachments > Active

Check if the AWS IAM Rolepolicyattachment is active based on AWS > IAM > Rolepolicyattachment > Active > * policies.

Resource Types

This policy targets the following resource types:

Schema Type	`string`
Default	`Skip`
Valid Values [YAML]	`Skip` `Check: Active` `Enforce: Delete inactive with 1 day warning` `Enforce: Delete inactive with 3 days warning` `Enforce: Delete inactive with 7 days warning` `Enforce: Delete inactive with 14 days warning` `Enforce: Delete inactive with 30 days warning` `Enforce: Delete inactive with 60 days warning` `Enforce: Delete inactive with 90 days warning` `Enforce: Delete inactive with 180 days warning` `Enforce: Delete inactive with 365 days warning`
Examples [YAML]	`Check: Active`

Category URI

tmod:@turbot/turbot#/control/categories/resourceActive

Policy Type URI

tmod:@turbot/aws-iam#/policy/types/rolePolicyAttachmentActive

GraphQL

query policyType(id: "tmod:@turbot/aws-iam#/policy/types/rolePolicyAttachmentActive") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-iam#/policy/types/rolePolicyAttachmentActive'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-iam#/policy/types/rolePolicyAttachmentActive'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-iam#/policy/types/rolePolicyAttachmentActive"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-iam#/policy/types/rolePolicyAttachmentActive"