How To View AWS IAM Roles With Administrator Access Permissions Using RQL in Prisma Cloud

• Prisma Cloud 
• AWS 
• RQL 

1. GUI: Log into Prisma Cloud Console > Investigate > Search the RQL below

config from cloud.resource where cloud.type = 'aws' AND api.name = 'aws-iam-list-roles' as X; config from cloud.resource where api.name = 'aws-iam-get-policy-version' as Y; filter "($.X.inlinePolicies[*].policyDocument.Statement[?(@.Effect=='Allow' && @.Resource=='*')].Action any equal *) or ($.X.attachedPolicies[*].policyArn contains $.Y.policyArn and $.Y.document.Statement[?(@.Effect=='Allow' && @.Resource=='*')].Action any equal *)"; show X;