control "aws_iam_groups recall" do describe aws_iam_groups do it { should exist } end end