IAM actions

Every IAM action

• AWS IAM Add Role To Instance ProfileAdd an IAM role to an instance profile.
• AWS IAM Add User to GroupAdd an existing IAM user to an IAM group.
• AWS IAM Attach Group PolicyAttach a managed policy to an IAM group.
• AWS IAM Attach Role PolicyAttach a managed policy to an IAM role.
• AWS IAM Attach User PolicyAttach a managed policy to an IAM user.
• AWS IAM Change PasswordChange the calling IAM user's own console password. Both passwords are sensitive.
• AWS IAM Create Access KeyCreate an access key for an IAM user. The secret is shown only once.
• AWS IAM Create GroupCreate a new IAM group with an optional path.
• AWS IAM Create Instance ProfileCreate an IAM instance profile with optional path and tags.
• AWS IAM Create Login ProfileCreate a console login profile (password) for an IAM user. Password is sensitive.
• AWS IAM Create OIDC ProviderCreate an IAM OpenID Connect identity provider for SSO federation.
• AWS IAM Create PolicyCreate an IAM managed policy from a JSON document.
• AWS IAM Create Policy VersionAdd a new version to an IAM managed policy, optionally as default.
• AWS IAM Create RoleCreate a new IAM role with a trust policy, plus optional tags and boundary.
• AWS IAM Create SAML ProviderCreate an IAM SAML identity provider for SSO federation from an IdP metadata document.
• AWS IAM Create Service-Linked RoleCreate an IAM service-linked role for an AWS service principal.
• AWS IAM Create UserCreate a new IAM user with optional path, permissions boundary and tags.
• AWS IAM Create Virtual MFA DeviceCreate a virtual MFA device, returning its seed and QR code.
• AWS IAM Deactivate MFA DeviceDeactivate an MFA device for an IAM user.
• AWS IAM Delete Access KeyDelete an access key belonging to an IAM user.
• AWS IAM Delete GroupDelete an IAM group. The group must have no members first.
• AWS IAM Delete Group PolicyDelete an inline policy from an IAM group.
• AWS IAM Delete Instance ProfileDelete an IAM instance profile.
• AWS IAM Delete Login ProfileDelete an IAM user's console login profile, removing password sign-in.
• AWS IAM Delete OIDC ProviderDelete an IAM OpenID Connect identity provider by ARN.
• AWS IAM Delete PolicyDelete an IAM managed policy by its ARN.
• AWS IAM Delete Policy VersionDelete a non-default version of an IAM managed policy.
• AWS IAM Delete RoleDelete an IAM role. Detach policies and instance profiles first.
• AWS IAM Delete Role Permissions BoundaryRemove the permissions boundary from an IAM role.
• AWS IAM Delete Role PolicyRemove an inline policy from an IAM role.
• AWS IAM Delete SAML ProviderDelete an IAM SAML identity provider by ARN.
• AWS IAM Delete Service-Linked RoleSubmit an IAM service-linked role for deletion, returning a task ID.
• AWS IAM Delete UserDelete an IAM user by name.
• AWS IAM Delete User Permissions BoundaryRemove the permissions boundary from an IAM user.
• AWS IAM Delete User PolicyDelete an inline policy from an IAM user.
• AWS IAM Delete Virtual MFA DeviceDelete a virtual MFA device by its serial number.
• AWS IAM Detach Group PolicyDetach a managed policy from an IAM group.
• AWS IAM Detach Role PolicyDetach a managed policy from an IAM role.
• AWS IAM Detach User PolicyDetach a managed policy from an IAM user.
• AWS IAM Enable MFA DeviceAssociate and activate an MFA device for an IAM user.
• AWS IAM Generate Credential ReportStart generating the account's IAM credential report (IAM is global; region is ignored).
• AWS IAM Generate Service Last Accessed DetailsStart a service-last-accessed report for an IAM user, role, group or policy ARN.
• AWS IAM Get Account Password PolicyRetrieve the password policy for the AWS account.
• AWS IAM Get Account SummaryRetrieve IAM entity usage and quota counts for the AWS account.
• AWS IAM Get Credential ReportRetrieve the account's IAM credential report as CSV (IAM is global; region is ignored).
• AWS IAM Get GroupRetrieve an IAM group along with the list of its member users.
• AWS IAM Get Group PolicyRetrieve an inline JSON policy document from an IAM group.
• AWS IAM Get Instance ProfileRetrieve details of an IAM instance profile including its roles.
• AWS IAM Get Login ProfileRetrieve the console login profile for an IAM user (IAM is global; region is ignored).
• AWS IAM Get OIDC ProviderRetrieve an IAM OpenID Connect identity provider's URL, client IDs and thumbprints.
• AWS IAM Get PolicyRetrieve details of an IAM managed policy by its ARN.
• AWS IAM Get Policy VersionRetrieve a specific version of an IAM managed policy, including its document.
• AWS IAM Get RoleRetrieve an IAM role, including its trust policy document.
• AWS IAM Get Role PolicyRetrieve an inline policy document attached to an IAM role.
• AWS IAM Get SAML ProviderRetrieve an IAM SAML identity provider's metadata document and validity dates.
• AWS IAM Get Service Last Accessed DetailsRetrieve a service-last-accessed report by its job ID (IAM is global; region is ignored).
• AWS IAM Get Service-Linked Role Deletion StatusCheck the status of a submitted IAM service-linked role deletion task.
• AWS IAM Get UserRetrieve details about an IAM user (blank name returns the calling user).
• AWS IAM Get User PolicyRetrieve an inline JSON policy document from an IAM user.
• AWS IAM List Access KeysList access keys for an IAM user (defaults to the calling user).
• AWS IAM List Attached Group PoliciesList the managed policies attached to an IAM group.
• AWS IAM List Attached Role PoliciesList the managed policies attached to an IAM role.
• AWS IAM List Attached User PoliciesList the managed policies attached to an IAM user.
• AWS IAM List Group PoliciesList the names of inline policies attached to an IAM group.
• AWS IAM List GroupsList IAM groups, optionally filtered by a path prefix.
• AWS IAM List Instance Profile TagsList the tags attached to an IAM instance profile.
• AWS IAM List Instance ProfilesList IAM instance profiles, optionally filtered by path prefix.
• AWS IAM List MFA DevicesList the MFA devices attached to an IAM user (or the caller).
• AWS IAM List OIDC ProvidersList all IAM OpenID Connect identity providers defined in the account.
• AWS IAM List PoliciesList IAM managed policies, filtered by scope, path and attachment.
• AWS IAM List Policy TagsList the tags attached to an IAM customer managed policy.
• AWS IAM List Policy VersionsList the versions of an IAM managed policy.
• AWS IAM List Role PoliciesList the inline policy names attached to an IAM role.
• AWS IAM List RolesList IAM roles, optionally filtered by a path prefix.
• AWS IAM List SAML ProvidersList all IAM SAML identity providers defined in the account.
• AWS IAM List User PoliciesList the names of inline policies attached to an IAM user.
• AWS IAM List User TagsList the tags attached to an IAM user.
• AWS IAM List UsersList IAM users, optionally filtered by a path prefix.
• AWS IAM Put Group PolicyAdd or update an inline JSON policy on an IAM group.
• AWS IAM Put Role Permissions BoundarySet the permissions boundary policy on an IAM role.
• AWS IAM Put Role PolicyAdd or update an inline JSON policy on an IAM role.
• AWS IAM Put User Permissions BoundarySet the permissions boundary policy on an IAM user.
• AWS IAM Put User PolicyAdd or update an inline JSON policy on an IAM user.
• AWS IAM Remove Role From Instance ProfileRemove an IAM role from an instance profile.
• AWS IAM Remove User from GroupRemove an IAM user from an IAM group.
• AWS IAM Resync MFA DeviceResynchronise an IAM user's MFA device with two auth codes.
• AWS IAM Set Default Policy VersionSet which version of an IAM managed policy is the active default.
• AWS IAM Simulate Custom PolicySimulate how supplied IAM policy documents evaluate against actions and resources.
• AWS IAM Simulate Principal PolicySimulate how a principal's policies evaluate against actions and resources.
• AWS IAM Tag Instance ProfileAdd or update tags on an IAM instance profile.
• AWS IAM Tag PolicyAdd or update tags on an IAM customer managed policy.
• AWS IAM Tag RoleAdd or update tags on an IAM role.
• AWS IAM Tag UserAdd or update tags on an IAM user.
• AWS IAM Untag Instance ProfileRemove one or more tags from an IAM instance profile by tag key.
• AWS IAM Untag PolicyRemove one or more tags from an IAM policy by tag key.
• AWS IAM Untag RoleRemove one or more tags from an IAM role by tag key.
• AWS IAM Untag UserRemove one or more tags from an IAM user by tag key.
• AWS IAM Update Access KeyActivate or deactivate an IAM user's access key.
• AWS IAM Update Account Password PolicyUpdate the password policy for the AWS account.
• AWS IAM Update Assume Role PolicyReplace the trust (assume role) policy document of an IAM role.
• AWS IAM Update GroupRename an IAM group or change its path.
• AWS IAM Update Login ProfileUpdate an IAM user's console password or reset flag. Password is sensitive.
• AWS IAM Update RoleUpdate an IAM role's description and/or maximum session duration.
• AWS IAM Update SAML ProviderUpdate an IAM SAML identity provider with a new IdP metadata document.
• AWS IAM Update UserRename an IAM user or change its path.

Also in AWS