populated checks

checks/check116

@@ -0,0 +1,22 @@
+CHECK_ID_check116="" 
+CHECK_TITLE_check116="" 
+CHECK_SCORED_check116="" 
+CHECK_TYPE_check116="" 
+CHECK_ALTERNATE_check116="check116" 
+ 
+check116(){
+  # "Ensure IAM policies are attached only to groups or roles (Scored)"
+  textTitle "$ID116" "$TITLE116" "SCORED" "LEVEL1"
+  LIST_USERS=$($AWSCLI iam list-users --query 'Users[*].UserName' --output text $PROFILE_OPT --region $REGION)
+  C116_NUM_USERS=0
+  for user in $LIST_USERS;do
+    USER_POLICY=$($AWSCLI iam list-attached-user-policies --output text $PROFILE_OPT --region $REGION --user-name $user)
+    if [[ $USER_POLICY ]]; then
+      textWarn "$user has policy directly attached "
+      C116_NUM_USERS=$(expr $C116_NUM_USERS + 1)
+    fi
+  done
+  if [[ $C116_NUM_USERS -eq 0 ]]; then
+    textOK "No policies attached to users."
+  fi
+}