aws-iam

name	aws-iam
description	Manage AWS IAM users, roles, policies, and access keys.
metadata	{"thinkfleetbot":{"emoji":"🔐","requires":{"bins":["aws","jq"],"env":["AWS_ACCESS_KEY_ID","AWS_SECRET_ACCESS_KEY"]}}}

AWS IAM

Manage identity and access management.

List users

aws iam list-users --query 'Users[].{Name:UserName,Created:CreateDate,LastUsed:PasswordLastUsed}' --output table

List roles

aws iam list-roles --query 'Roles[].{Name:RoleName,Created:CreateDate,Path:Path}' --output table | head -30

Get role details

aws iam get-role --role-name my-role | jq '{RoleName: .Role.RoleName, Arn: .Role.Arn, AssumeRolePolicy: .Role.AssumeRolePolicyDocument}'

List attached policies (role)

aws iam list-attached-role-policies --role-name my-role --query 'AttachedPolicies[].{Name:PolicyName,Arn:PolicyArn}' --output table

List inline policies (role)

aws iam list-role-policies --role-name my-role --output table

Get policy document

aws iam get-policy-version --policy-arn arn:aws:iam::123456789:policy/my-policy \
  --version-id v1 | jq '.PolicyVersion.Document'

List access keys

aws iam list-access-keys --user-name my-user --query  --output table