'alert when an IAM Object has a policy allowing \'iam:PassRole\'.
This allows the object to pass any role specified in the resource block to an ec2 instance.'

def check_iam_passrole(self, iam_object):

    if ((not is_aws_managed_policy(iam_object)) or (is_aws_managed_policy(iam_object) and has_attached_resources(iam_object))):
        self.library_check_iamobj_has_iam_passrole(iam_object, policies_key='policy', multiple_policies=False)
