| Guid |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
A unique identifier that is a combination of the GUID of the selected Scan and the AWS IAM Policy’s unique ID. |
| FSName |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
A special unique identifier that is a combination of the PolicyName and the AWS Account ID. |
| Arn |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
Amazon Resource Name that uniquely identifies this IAM policy across all of AWS. |
| AccountId |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The AWS account ID that this IAM policy belongs to. Empty for AWS managed policies. |
| PolicyName |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The friendly name that identifies the IAM policy. |
| Description |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
A description of the policy provided by the administrator. |
| DefaultVersionId |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The identifier for the version of the policy that is set as the default version. |
| AttachmentCount |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
The number of entities (users, groups, and roles) that the policy is attached to. |
| IsAttachable |
BOOLEAN |
N/A (toggle) |
Indicates whether the policy can be attached to an IAM user, group, or role. |
| IsAwsManaged |
BOOLEAN |
N/A (toggle) |
Indicates whether this is an AWS managed policy (pre-created and managed by AWS) as opposed to a customer managed policy. |
| GrantsAdminPrivileges |
BOOLEAN |
N/A (toggle) |
Indicates whether the policy grants administrative privileges (e.g., contains *:* or equivalent wide permissions). |
| UsesWildcards |
BOOLEAN |
N/A (toggle) |
Indicates whether the policy document contains wildcard characters (* or ?) in actions or resources. |
| AWSTier |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
Privilege tier of the policy based on the permissions it grants. Higher values indicate more sensitive permissions. |
| CreateDate |
DATE |
SMALLER, LARGER, BETWEEN, EQUAL, IS_EMPTY |
The date and time when the IAM policy was created. |
| UpdateDate |
DATE |
SMALLER, LARGER, BETWEEN, EQUAL, IS_EMPTY |
The date and time when the policy’s default version was last updated. |
| ExposurePoint |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
A numerical value indicating the level of exposure based on how many entities are affected by this policy. |
| risk |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
The risk score of the policy calculated based on vulnerability counts and severities. |