Check failing due to IAM Roles created by AWS Control Tower and AFT with AdministratorAccess policy

[dmkim22-lguplus]

Hello,

IAM Roles created by AWS Control Tower and AFT (Account Factory for Terraform) have AdministratorAccess policy attached, and it seems "Ensure IAM AWS-Managed policies that allow full ":" administrative privileges are not attached" is failing due to this.

Should the following IAM Roles in an account be excluded from this check?

• aws-controltower-AdministratorExecutionRole
• AWSAFTExecution
• AWSAFTService
• AWSControlTowerExecution
• stacksets-exec-*

Thank you in advance.

[jfagoagas]

@dmkim22-lguplus I'm moving this to an issue #3810

Thanks for using Prowler 🚀