AWS Security ChangesHomeSearch

AWS code-library documentation change

Service: code-library · 2025-06-28 · Documentation low

File: code-library/latest/ug/iam_example_iam_GetAccountAuthorizationDetails_section.md

Summary

Added PowerShell V5 example demonstrating retrieval of account authorization details including users, groups, and roles

Security assessment

The change documents how to audit IAM entity permissions but does not address a specific vulnerability. It enhances security visibility without fixing an existing issue.

Diff

diff --git a/code-library/latest/ug/iam_example_iam_GetAccountAuthorizationDetails_section.md b/code-library/latest/ug/iam_example_iam_GetAccountAuthorizationDetails_section.md
index 136d1c7eb..fe13d8aa2 100644
--- a//code-library/latest/ug/iam_example_iam_GetAccountAuthorizationDetails_section.md
+++ b//code-library/latest/ug/iam_example_iam_GetAccountAuthorizationDetails_section.md
@@ -386,0 +387,55 @@ PowerShell
+
+
+
+
+**Tools for PowerShell V5**
+    
+
+**Example 1: This example gets authorization details about the identities in the AWS account, and displays the element list of the returned object, including users, groups, and roles. For example, the`UserDetailList` property displays details about the users. Similar information is available in the `RoleDetailList` and `GroupDetailList` properties.**
+    
+    
+    $Details=Get-IAMAccountAuthorizationDetail
+    $Details
+    
+
+**Output:**
+    
+    
+    GroupDetailList : {Administrators, Developers, Testers, Backup}
+    IsTruncated     : False
+    Marker          : 
+    RoleDetailList  : {TestRole1, AdminRole, TesterRole, clirole...}
+    UserDetailList  : {Administrator, Bob, BackupToS3, }
+    
+    
+    $Details.UserDetailList
+    
+
+**Output:**
+    
+    
+    Arn            : arn:aws:iam::123456789012:user/Administrator
+    CreateDate     : 10/16/2014 9:03:09 AM
+    GroupList      : {Administrators}
+    Path           : /
+    UserId         : AIDACKCEVSQ6CEXAMPLE1
+    UserName       : Administrator
+    UserPolicyList : {}
+    
+    Arn            : arn:aws:iam::123456789012:user/Bob
+    CreateDate     : 4/6/2015 12:54:42 PM
+    GroupList      : {Developers}
+    Path           : /
+    UserId         : AIDACKCEVSQ6CEXAMPLE2
+    UserName       : bab
+    UserPolicyList : {}
+    
+    Arn            : arn:aws:iam::123456789012:user/BackupToS3
+    CreateDate     : 1/27/2015 10:15:08 AM
+    GroupList      : {Backup}
+    Path           : /
+    UserId         : AIDACKCEVSQ6CEXAMPLE3
+    UserName       : BackupToS3
+    UserPolicyList : {BackupServicePermissionsToS3Buckets}
+
+  * For API details, see [GetAccountAuthorizationDetails](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_.