Rule purpose: Check whether any idle permission policy exists on CAM.
Compliance evaluation logic: When each permission policy is associated with at least one user, user group, or role, the evaluation result is "compliant".
Rule Identifier: cam-policy-in-use.
Risk Level: Low.
Applicable Resource Type: QCS::CAM::Policy.
Rule trigger type: Periodic execution, every 24 hours.
Keyword: User, user group, role, policy.
Rule parameter: None.