AWS IAM documentation change
Summary
Added PowerShell V5 example showing how to retrieve account authorization details including users, groups, and roles
Security assessment
The change adds documentation about security-related IAM features (user/group/role permissions auditing) but does not address a specific security vulnerability
Diff
diff --git a/IAM/latest/UserGuide/iam_example_iam_GetAccountAuthorizationDetails_section.md b/IAM/latest/UserGuide/iam_example_iam_GetAccountAuthorizationDetails_section.md index d2e96b2dc..43df74f00 100644 --- a//IAM/latest/UserGuide/iam_example_iam_GetAccountAuthorizationDetails_section.md +++ b//IAM/latest/UserGuide/iam_example_iam_GetAccountAuthorizationDetails_section.md @@ -388,0 +389,55 @@ PowerShell +**Tools for PowerShell V5** + + +**Example 1: This example gets authorization details about the identities in the AWS account, and displays the element list of the returned object, including users, groups, and roles. For example, the`UserDetailList` property displays details about the users. Similar information is available in the `RoleDetailList` and `GroupDetailList` properties.** + + + $Details=Get-IAMAccountAuthorizationDetail + $Details + + +**Output:** + + + GroupDetailList : {Administrators, Developers, Testers, Backup} + IsTruncated : False + Marker : + RoleDetailList : {TestRole1, AdminRole, TesterRole, clirole...} + UserDetailList : {Administrator, Bob, BackupToS3, } + + + $Details.UserDetailList + + +**Output:** + + + Arn : arn:aws:iam::123456789012:user/Administrator + CreateDate : 10/16/2014 9:03:09 AM + GroupList : {Administrators} + Path : / + UserId : AIDACKCEVSQ6CEXAMPLE1 + UserName : Administrator + UserPolicyList : {} + + Arn : arn:aws:iam::123456789012:user/Bob + CreateDate : 4/6/2015 12:54:42 PM + GroupList : {Developers} + Path : / + UserId : AIDACKCEVSQ6CEXAMPLE2 + UserName : bab + UserPolicyList : {} + + Arn : arn:aws:iam::123456789012:user/BackupToS3 + CreateDate : 1/27/2015 10:15:08 AM + GroupList : {Backup} + Path : / + UserId : AIDACKCEVSQ6CEXAMPLE3 + UserName : BackupToS3 + UserPolicyList : {BackupServicePermissionsToS3Buckets} + + * For API details, see [GetAccountAuthorizationDetails](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. + + + +