iam_get_account_authorization_details: Retrieves information about all IAM users, groups, roles, and policies in your AWS account, including their relationships to one another

Description

Retrieves information about all IAM users, groups, roles, and policies in your AWS account, including their relationships to one another. Use this API to obtain a snapshot of the configuration of IAM permissions (users, groups, roles, and policies) in your account.

Policies returned by this API are URL-encoded compliant with RFC 3986. You can use a URL decoding method to convert the policy back to plain JSON text. For example, if you use Java, you can use the decode method of the java.net.URLDecoder utility class in the Java SDK. Other languages and SDKs provide similar functionality.

You can optionally filter the results using the Filter parameter. You can paginate the results using the MaxItems and Marker parameters.

Usage

iam_get_account_authorization_details(Filter, MaxItems, Marker)

Arguments

Filter

A list of entity types used to filter the results. Only the entities that match the types you specify are included in the output. Use the value LocalManagedPolicy to include customer managed policies.

The format for this parameter is a comma-separated (if more than one) list of strings. Each string value in the list must be one of the valid values listed below.

MaxItems

Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond the maximum you specify, the IsTruncated response element is true.

If you do not include this parameter, the number of items defaults to 100. Note that IAM might return fewer results, even when there are more results available. In that case, the IsTruncated response element returns true, and Marker contains a value to include in the subsequent call that tells the service where to continue from.

Marker

Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to the value of the Marker element in the response that you received to indicate where the next call should start.

Value

A list with the following syntax:

list(
  UserDetailList = list(
    list(
      Path = "string",
      UserName = "string",
      UserId = "string",
      Arn = "string",
      CreateDate = as.POSIXct(
        "2015-01-01"
      ),
      UserPolicyList = list(
        list(
          PolicyName = "string",
          PolicyDocument = "string"
        )
      ),
      GroupList = list(
        "string"
      ),
      AttachedManagedPolicies = list(
        list(
          PolicyName = "string",
          PolicyArn = "string"
        )
      ),
      PermissionsBoundary = list(
        PermissionsBoundaryType = "PermissionsBoundaryPolicy",
        PermissionsBoundaryArn = "string"
      ),
      Tags = list(
        list(
          Key = "string",
          Value = "string"
        )
      )
    )
  ),
  GroupDetailList = list(
    list(
      Path = "string",
      GroupName = "string",
      GroupId = "string",
      Arn = "string",
      CreateDate = as.POSIXct(
        "2015-01-01"
      ),
      GroupPolicyList = list(
        list(
          PolicyName = "string",
          PolicyDocument = "string"
        )
      ),
      AttachedManagedPolicies = list(
        list(
          PolicyName = "string",
          PolicyArn = "string"
        )
      )
    )
  ),
  RoleDetailList = list(
    list(
      Path = "string",
      RoleName = "string",
      RoleId = "string",
      Arn = "string",
      CreateDate = as.POSIXct(
        "2015-01-01"
      ),
      AssumeRolePolicyDocument = "string",
      InstanceProfileList = list(
        list(
          Path = "string",
          InstanceProfileName = "string",
          InstanceProfileId = "string",
          Arn = "string",
          CreateDate = as.POSIXct(
            "2015-01-01"
          ),
          Roles = list(
            list(
              Path = "string",
              RoleName = "string",
              RoleId = "string",
              Arn = "string",
              CreateDate = as.POSIXct(
                "2015-01-01"
              ),
              AssumeRolePolicyDocument = "string",
              Description = "string",
              MaxSessionDuration = 123,
              PermissionsBoundary = list(
                PermissionsBoundaryType = "PermissionsBoundaryPolicy",
                PermissionsBoundaryArn = "string"
              ),
              Tags = list(
                list(
                  Key = "string",
                  Value = "string"
                )
              ),
              RoleLastUsed = list(
                LastUsedDate = as.POSIXct(
                  "2015-01-01"
                ),
                Region = "string"
              )
            )
          )
        )
      ),
      RolePolicyList = list(
        list(
          PolicyName = "string",
          PolicyDocument = "string"
        )
      ),
      AttachedManagedPolicies = list(
        list(
          PolicyName = "string",
          PolicyArn = "string"
        )
      ),
      PermissionsBoundary = list(
        PermissionsBoundaryType = "PermissionsBoundaryPolicy",
        PermissionsBoundaryArn = "string"
      ),
      Tags = list(
        list(
          Key = "string",
          Value = "string"
        )
      ),
      RoleLastUsed = list(
        LastUsedDate = as.POSIXct(
          "2015-01-01"
        ),
        Region = "string"
      )
    )
  ),
  Policies = list(
    list(
      PolicyName = "string",
      PolicyId = "string",
      Arn = "string",
      Path = "string",
      DefaultVersionId = "string",
      AttachmentCount = 123,
      PermissionsBoundaryUsageCount = 123,
      IsAttachable = TRUE|FALSE,
      Description = "string",
      CreateDate = as.POSIXct(
        "2015-01-01"
      ),
      UpdateDate = as.POSIXct(
        "2015-01-01"
      ),
      PolicyVersionList = list(
        list(
          Document = "string",
          VersionId = "string",
          IsDefaultVersion = TRUE|FALSE,
          CreateDate = as.POSIXct(
            "2015-01-01"
          )
        )
      )
    )
  ),
  IsTruncated = TRUE|FALSE,
  Marker = "string"
)

Request syntax

svc$get_account_authorization_details(
  Filter = list(
    "User"|"Role"|"Group"|"LocalManagedPolicy"|"AWSManagedPolicy"
  ),
  MaxItems = 123,
  Marker = "string"
)