Add policy pack - Remove privileged access from federated roles

[Joeturbot]

Control objective Identify IAM roles with privileged access across all federated roles.

• Admin access defined as "Action": ":"
• IAM Full access defined as "Action": "iam:*"

Remediation

• Strip privileged access from federated IAM roles only. All other IAM roles should remain untouched.

Categories

• Access Management

Additional context Source Conversation: https://turbothq.slack.com/archives/C06DF1TE16D/p1723561500674229