Before you grant access to this API, it is important to know that: Let’s look at how this API works by walking through an example using the AWS command line.įirst, you must use an IAM user that has permission to call this API. For example, if you specify, then only details for are returned.

You can filter the results based on the entity type. Roles: Role Name, Role ID, ARN, Path, Creation Date, associated instance profiles, role trust policies, and the attached access control policiesīy default, the GetAccountAuthorizationDetails API returns details for entities that can have a policy attached.Groups: Group Name, Group ID, Group ARN, Path, Creation Date, and the attached access control policies.Users: User Name, User ID, User ARN, Path, Creation Date, associated groups, and the attached access control policies.Based on the entity type, it returns the following information: The API returns details about all the users, groups, and roles in your account. With your IAM settings in one place you could use the output to monitor your intended IAM settings, store snapshots to understand differences in your IAM settings between points in time, and show IAM settings for auditing purposes.

Previously you had to use a combination of multiple API calls, some of which had to be called multiple times. With the GetAccountAuthorizationDetails API you can get a snapshot of your IAM entities with a single API call. Today we’re making it easier for you to build tools to analyze, monitor, and audit your IAM entities (i.e., users, groups, and roles) by introducing a new API called GetAccountAuthorizationDetails. Do you analyze, audit, or monitor your AWS Identity and Access Management (IAM) settings? If so, you will be happy to hear we’ve simplified the way you can retrieve a snapshot of your IAM settings.

Securityspy export settings