A Config rule that checks that none of your IAM users have policies attached. IAM users must inherit permissions from IAM groups or roles.

 
Items
1
Size
0.6 KB
AWSTemplateFormatVersion: '2010-09-09'
Resources:
  ConfigRule:
    Type: 'AWS::Config::ConfigRule'
    Properties:
      ConfigRuleName: iam-user-no-policies-check
      Description: >-
        A Config rule that checks that none of your IAM users have policies
        attached. IAM users must inherit permissions from IAM groups or roles.
      InputParameters: {}
      Scope:
        ComplianceResourceTypes:
          - 'AWS::IAM::User'
      Source:
        Owner: AWS
        SourceIdentifier: IAM_USER_NO_POLICIES_CHECK
Parameters: {}
Metadata: {}
Conditions: {}

Customize Cf Template

Rule Parameters

No rule paramters
 
* Required field