So we just tried to run aardvark and repokid on our roles but several of them had no suggested policies.

After debugging repokid for a while it seems like role.policies that is checked only contains inline policies. Attached policies are ignored.

Can attached policies be used as source aswell?

As a workaround we're copying all attached policies to inline policies.

@KorhanOzturk90