Skip to main content

RAM Group In Use Check

ID: rule:aliyun:ram-group-in-use-check
Severity: low

Description​

Ensures RAM groups are not idle - must have at least one member and at least one attached policy.

Reason for Violation​

Idle RAM groups increase management complexity and should be removed.

Recommendation​

Add members to the group or attach policies, or remove the unused group.

Resource Types​

  • ALIYUN::RAM::Group