Enumeration

Users

aws iam list-users

list IAM users :

aws iam list-groups-for-user --user-name user-name

List the IAM groups that the specified IAM user belongs to :

aws iam list-attached-user-policies --user-name user-name

List all manages policies that are attached to the specified IAM user :

aws iam list-user-policies --user-name user-name

Lists the names of the inline policies embedded in the specified IAM user :

Groups

aws iam list-groups

list of IAM groups

aws iam list-attached-group-policies --group-name group-name

Lists all managed policies that are attached to the specified IAM Group :

aws iam list-group-policies --group-name group-name

List the names of the inline policies embedded in the specified IAM Group:

Roles

aws iam list-roles

list of IAM roles

aws iam list-attached-role-policies --role-name role-name

Lists all managed policies that are attached to the specified IAM role :

aws iam list-role-policies --role-name role-name

List the names of the inline policies embedded in the specified IAM role :

Policies

aws iam list-policies

list of IAM policies

aws iam get-policy --policy-arn policy-arn

Retrieves information about the specified managed policy :

aws iam list-policy-versions --policy-arn policy-arn

Lists information about the versions of the specified manages policy :

aws iam get-policy-version --policy-arn policy-arn --version-id version-id

Retrieved information about the specified version of the specified managed policy :

aws iam get-user-policy --user-name user-name --policy-name policy-name
aws iam get-group-policy --group-name group-name --policy-name policy-name
aws iam get-role-policy --role-name role-name --policy-name policy-name

Retrieves the specified inline policy document that is embedded on the specified IAM user / group / role :