caller_identities

Creates, updates, deletes, gets or lists a caller_identities resource.

Overview

Name	caller_identities
Type	Resource
Id	aws.sts.caller_identities

Fields

The following fields are returned by SELECT queries:

get_caller_identity

Name	Datatype	Description
account	string	The Amazon Web Services account ID number of the account that owns or contains the calling entity.
arn	string	The Amazon Web Services ARN associated with the calling entity.
user_id	string	The unique identifier of the calling entity. The exact value depends on the type of entity that is making the call. The values returned are those listed in the aws:userid column in the Principal table found on the Policy Variables reference page in the IAM User Guide.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_caller_identity	select	region		Returns details about the IAM user or role whose credentials are used to call the operation. No permissions are required to perform this operation. If an administrator attaches a policy to your identity that explicitly denies access to the sts:GetCallerIdentity action, you can still perform this operation. Permissions are not required because the same information is returned when access is denied. To view an example response, see I Am Not Authorized to Perform: iam:DeleteVirtualMFADevice in the IAM User Guide.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

get_caller_identity

Returns details about the IAM user or role whose credentials are used to call the operation. No permissions are required to perform this operation. If an administrator attaches a policy to your identity that explicitly denies access to the sts:GetCallerIdentity action, you can still perform this operation. Permissions are not required because the same information is returned when access is denied. To view an example response, see I Am Not Authorized to Perform: iam:DeleteVirtualMFADevice in the IAM User Guide.

SELECT
account,
arn,
user_id
FROM aws.sts.caller_identities
WHERE region = '{{ region }}' -- required
;