ResourceName - awsIAMUser

Sections

Resource Data
Example
1. FPL Code
2. Table Results

The awsIAMUser resource loads IAM users from one or more AWS Account(s). This data will be present when the AWS ResourceWatch integration is enabled.

Resource Data

An example of what this resource includes (JSON):

"@awsIAMUser": {
  "arn": "arn:aws:iam::123443456514:user/test-user",
  "CreateDate": "2021-03-29T16:28:03Z",
  "PasswordLastUsed": null,
  "Path": "/",
  "PermissionsBoundary": null,
  "Tags": null,
  "UserId": "AIBB4YYDA2Y1YMRHY1Y4C",
  "UserName": "test-user"
}

Example

FPL Code

An example for determining all IAM users that have authenticated with a password:

function loadIAMUsers()
    load resource awsIAMUser
    let {UserName, CreateDate, PasswordLastUsed, Path, dne, Tags}=f("@awsIAMUser")
    where sWildcard(PasswordLastUsed)
end

stream  users=loadIAMUsers()

Table Results

Results of the above FPL code:

Page last updated: 2022 Oct 24