AWS IAM documentation change
Summary
Added PowerShell V5 example for service access auditing with Get-IAMServiceLastAccessedDetailWithEntity
Security assessment
Documents access monitoring capabilities important for security hygiene, but doesn't address a specific security flaw
Diff
diff --git a/IAM/latest/UserGuide/iam_example_iam_GetServiceLastAccessedDetailsWithEntities_section.md b/IAM/latest/UserGuide/iam_example_iam_GetServiceLastAccessedDetailsWithEntities_section.md index f68b442f8..912deacd0 100644 --- a//IAM/latest/UserGuide/iam_example_iam_GetServiceLastAccessedDetailsWithEntities_section.md +++ b//IAM/latest/UserGuide/iam_example_iam_GetServiceLastAccessedDetailsWithEntities_section.md @@ -115,0 +116,50 @@ PowerShell +**Tools for PowerShell V5** + + +**Example 1: This example provides the last accessed timestamp for the service in the request by that respective IAM entity.** + + + $results = Get-IAMServiceLastAccessedDetailWithEntity -JobId f0b7a819-eab0-929b-dc26-ca598911cb9f -ServiceNamespace ec2 + $results + + +**Output:** + + + EntityDetailsList : {Amazon.IdentityManagement.Model.EntityDetails} + Error : + IsTruncated : False + JobCompletionDate : 12/29/19 11:19:31 AM + JobCreationDate : 12/29/19 11:19:31 AM + JobStatus : COMPLETED + Marker : + + + $results.EntityDetailsList + + +**Output:** + + + EntityInfo LastAuthenticated + ---------- ----------------- + Amazon.IdentityManagement.Model.EntityInfo 11/16/19 3:47:00 PM + + + $results.EntityInfo + + +**Output:** + + + Arn : arn:aws:iam::123456789012:user/TestUser + Id : AIDA4NBK5CXF5TZHU1234 + Name : TestUser + Path : / + Type : USER + + * For API details, see [GetServiceLastAccessedDetailsWithEntities](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. + + + +