account_authorization_details

Creates, updates, deletes, gets or lists an account_authorization_details resource.

Overview

Name	account_authorization_details
Type	Resource
Id	aws.iam.account_authorization_details

Fields

The following fields are returned by SELECT queries:

get_account_authorization_details

Name	Datatype	Description
arn	string	The Amazon Resource Name (ARN). ARNs are unique identifiers for Amazon Web Services resources. For more information about ARNs, go to Amazon Resource Names (ARNs) in the Amazon Web Services General Reference.
attached_managed_policies	string	A list of the managed policies attached to the user.
create_date	string	The date and time, in ISO 8601 date-time format, when the user was created.
group_list	string	A list of IAM groups that the user is in.
path	string	The path to the user. For more information about paths, see IAM identifiers in the IAM User Guide.
permissions_boundary	string	The ARN of the policy used to set the permissions boundary for the user. For more information about permissions boundaries, see Permissions boundaries for IAM identities in the IAM User Guide.
tags	string	A list of tags that are associated with the user. For more information about tagging, see Tagging IAM resources in the IAM User Guide.
user_id	string	The stable and unique string identifying the user. For more information about IDs, see IAM identifiers in the IAM User Guide.
user_name	string	The friendly name identifying the user.
user_policy_list	string	A list of the inline policies embedded in the user.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_account_authorization_details	select	region	Filter, MaxItems, Marker	Retrieves information about all IAM users, groups, roles, and policies in your Amazon Web Services account, including their relationships to one another. Use this operation to obtain a snapshot of the configuration of IAM permissions (users, groups, roles, and policies) in your account. Policies returned by this operation are URL-encoded compliant with RFC 3986. You can use a URL decoding method to convert the policy back to plain JSON text. For example, if you use Java, you can use the decode method of the java.net.URLDecoder utility class in the Java SDK. Other languages and SDKs provide similar functionality, and some SDKs do this decoding automatically. You can optionally filter the results using the Filter parameter. You can paginate the results using the MaxItems and Marker parameters.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)
Filter	array	A list of entity types used to filter the results. Only the entities that match the types you specify are included in the output. Use the value LocalManagedPolicy to include customer managed policies. The format for this parameter is a comma-separated (if more than one) list of strings. Each string value in the list must be one of the valid values listed below.
Marker	string	Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to the value of the Marker element in the response that you received to indicate where the next call should start.
MaxItems	integer	Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond the maximum you specify, the IsTruncated response element is true. If you do not include this parameter, the number of items defaults to 100. Note that IAM might return fewer results, even when there are more results available. In that case, the IsTruncated response element returns true, and Marker contains a value to include in the subsequent call that tells the service where to continue from.

SELECT examples

get_account_authorization_details

Retrieves information about all IAM users, groups, roles, and policies in your Amazon Web Services account, including their relationships to one another. Use this operation to obtain a snapshot of the configuration of IAM permissions (users, groups, roles, and policies) in your account. Policies returned by this operation are URL-encoded compliant with RFC 3986. You can use a URL decoding method to convert the policy back to plain JSON text. For example, if you use Java, you can use the decode method of the java.net.URLDecoder utility class in the Java SDK. Other languages and SDKs provide similar functionality, and some SDKs do this decoding automatically. You can optionally filter the results using the Filter parameter. You can paginate the results using the MaxItems and Marker parameters.

SELECT
arn,
attached_managed_policies,
create_date,
group_list,
path,
permissions_boundary,
tags,
user_id,
user_name,
user_policy_list
FROM aws.iam.account_authorization_details
WHERE region = '{{ region }}' -- required
AND Filter = '{{ Filter }}'
AND MaxItems = '{{ MaxItems }}'
AND Marker = '{{ Marker }}'
;