AWS code-library documentation change
Summary
Added PowerShell V5 example demonstrating retrieval of account authorization details including users, groups, and roles
Security assessment
The change documents how to audit IAM entity permissions but does not address a specific vulnerability. It enhances security visibility without fixing an existing issue.
Diff
diff --git a/code-library/latest/ug/iam_example_iam_GetAccountAuthorizationDetails_section.md b/code-library/latest/ug/iam_example_iam_GetAccountAuthorizationDetails_section.md index 136d1c7eb..fe13d8aa2 100644 --- a//code-library/latest/ug/iam_example_iam_GetAccountAuthorizationDetails_section.md +++ b//code-library/latest/ug/iam_example_iam_GetAccountAuthorizationDetails_section.md @@ -386,0 +387,55 @@ PowerShell + + + + +**Tools for PowerShell V5** + + +**Example 1: This example gets authorization details about the identities in the AWS account, and displays the element list of the returned object, including users, groups, and roles. For example, the`UserDetailList` property displays details about the users. Similar information is available in the `RoleDetailList` and `GroupDetailList` properties.** + + + $Details=Get-IAMAccountAuthorizationDetail + $Details + + +**Output:** + + + GroupDetailList : {Administrators, Developers, Testers, Backup} + IsTruncated : False + Marker : + RoleDetailList : {TestRole1, AdminRole, TesterRole, clirole...} + UserDetailList : {Administrator, Bob, BackupToS3, } + + + $Details.UserDetailList + + +**Output:** + + + Arn : arn:aws:iam::123456789012:user/Administrator + CreateDate : 10/16/2014 9:03:09 AM + GroupList : {Administrators} + Path : / + UserId : AIDACKCEVSQ6CEXAMPLE1 + UserName : Administrator + UserPolicyList : {} + + Arn : arn:aws:iam::123456789012:user/Bob + CreateDate : 4/6/2015 12:54:42 PM + GroupList : {Developers} + Path : / + UserId : AIDACKCEVSQ6CEXAMPLE2 + UserName : bab + UserPolicyList : {} + + Arn : arn:aws:iam::123456789012:user/BackupToS3 + CreateDate : 1/27/2015 10:15:08 AM + GroupList : {Backup} + Path : / + UserId : AIDACKCEVSQ6CEXAMPLE3 + UserName : BackupToS3 + UserPolicyList : {BackupServicePermissionsToS3Buckets} + + * For API details, see [GetAccountAuthorizationDetails](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_.