IAM 6+ checks Password policies, MFA, access keys, root account usage ...