Monitor compliance of the AWS CIS 1.15 benchmark.

Ensure IAM users only receive permissions via groups.