aws iam

https://awscli.amazonaws.com/v2/documentation/api/latest/reference/iam/index.html

Users

• aws iam get-user
• aws iam list-users
• aws iam create-user
• aws iam create-group
• aws iam add-user-to-group

• aws iam create-access-key
• aws iam create-login-profile
• aws iam change-password

• aws iam get-account-summary

Policy

• aws iam create-policy
• aws iam list-policies
• aws iam list-attached-user-policies --user-name
• aws iam list-group-policies
• aws iam list-role-policies
• aws iam put-group-policy
• aws iam put-role-policy
• aws iam put-user-policy
• aws iam attach-role-policy
• aws iam attach-group-policy

Roles

• aws iam list-roles
• aws iam create-role
• aws iam put-role-policy
• aws iam get-role
• aws iam create-service-linked-role
• aws iam update-role

Alias

• aws iam list-account-aliases
• aws iam create-account-alias
• aws iam delete-account-alias

SAML

• aws iam create-saml-provider
• aws iam list-saml-providers

Keys

• aws iam create-access-key
• aws iam list-access-keys

MFA

• aws iam create-virtual-mfa-device
• aws iam enable-mfa-device
• aws iam list-mfa-devices
• aws iam list-virtual-mfa-devices
• aws iam list-mfa-device-tags
• aws iam resync-mfa-device
• aws iam tag-mfa-device
• aws iam untag-mfa-device
• aws iam deactivate-mfa-device
• aws iam delete-virtual-mfa-device

STS

• aws iam set-security-token-service-preferences

Open ID

aws iam list-open-id-connect-providers

All commands

add-client-id-to-open-id-connect-provider
add-role-to-instance-profile
add-user-to-group
attach-group-policy
attach-role-policy
attach-user-policy
change-password
create-access-key
create-account-alias
create-group
create-instance-profile
create-login-profile
create-open-id-connect-provider
create-policy
create-policy-version
create-role
create-saml-provider
create-service-linked-role
create-service-specific-credential
create-user
create-virtual-mfa-device
deactivate-mfa-device
delete-access-key
delete-account-alias
delete-account-password-policy
delete-group
delete-group-policy
delete-instance-profile
delete-login-profile
delete-open-id-connect-provider
delete-policy
delete-policy-version
delete-role
delete-role-permissions-boundary
delete-role-policy
delete-saml-provider
delete-server-certificate
delete-service-linked-role
delete-service-specific-credential
delete-signing-certificate
delete-ssh-public-key
delete-user
delete-user-permissions-boundary
delete-user-policy
delete-virtual-mfa-device
detach-group-policy
detach-role-policy
detach-user-policy
enable-mfa-device
generate-credential-report
generate-organizations-access-report
generate-service-last-accessed-details

get-access-key-last-used

get-account-authorization-details
get-account-password-policy
get-account-summary
get-context-keys-for-custom-policy
get-context-keys-for-principal-policy
get-credential-report
get-group
get-group-policy
get-instance-profile
get-login-profile
get-open-id-connect-provider
get-organizations-access-report
get-policy
get-policy-version
get-role
get-role-policy
get-saml-provider
get-server-certificate
get-service-last-accessed-details
get-service-last-accessed-details-with-entities
get-service-linked-role-deletion-status
get-ssh-public-key
get-user
get-user-policy
list-access-keys
list-account-aliases
list-attached-group-policies
list-attached-role-policies
list-attached-user-policies
list-entities-for-policy
list-group-policies
list-groups
list-groups-for-user
list-instance-profile-tags
list-instance-profiles
list-instance-profiles-for-role
list-mfa-device-tags
list-mfa-devices
list-open-id-connect-provider-tags
list-open-id-connect-providers
list-policies
list-policies-granting-service-access
list-policy-tags
list-policy-versions
list-role-policies
list-role-tags
list-roles
list-saml-provider-tags
list-saml-providers
list-server-certificate-tags
list-server-certificates
list-service-specific-credentials
list-signing-certificates
list-ssh-public-keys
list-user-policies
list-user-tags
list-users
list-virtual-mfa-devices
put-group-policy
put-role-permissions-boundary
put-role-policy
put-user-permissions-boundary
put-user-policy
remove-client-id-from-open-id-connect-provider
remove-role-from-instance-profile
remove-user-from-group
reset-service-specific-credential
resync-mfa-device
set-default-policy-version
set-security-token-service-preferences
simulate-custom-policy
simulate-principal-policy
tag-instance-profile
tag-mfa-device
tag-open-id-connect-provider
tag-policy
tag-role
tag-saml-provider
tag-server-certificate
tag-user
untag-instance-profile
untag-mfa-device
untag-open-id-connect-provider
untag-policy
untag-role
untag-saml-provider
untag-server-certificate
untag-user
update-access-key
update-account-password-policy
update-assume-role-policy
update-group
update-login-profile
update-open-id-connect-provider-thumbprint
update-role
update-role-description
update-saml-provider
update-server-certificate
update-service-specific-credential
update-signing-certificate
update-ssh-public-key
update-user
upload-server-certificate
upload-signing-certificate
upload-ssh-public-key
wait

Activities

• Create and aws account alias from the AWS IAM Dashboard

Related terms

• aws sts
• AWS::IAM
• gcloud iam
• oci iam

See also

• aws iam, create-saml-provider, list-saml-providers
• aws iam [ create-user, create-group, get-user, list-users | list-policies | list-attached-user-policies | attach-user-policy | list-attached-user-policies | list-roles | get-account-summary | put-group-policy | put-role-policy | put-user-policy | create-login-profile | aws iam delete-virtual-mfa-device | aws iam list-virtual-mfa-devices | aws iam create-saml-provider | aws iam list-account-aliases | aws iam create-role | aws iam change-password| enable-mfa-device | list-instance-profiles
• IAM: AWS IAM Identity Center, AWS Identity and Access Management, Google Cloud IAM, Azure IAM, SailPoint, CyberArk, CIAM, ForgeRock, iam:ChangePassword, aws iam, AdministratorAccess, Context keys, IAM Access Analyzer, AWS policy, AWS managed policies, IAMUserChangePassword, AWS Roles, List of AWS policies, Resource-based policy, aws-iam-authenticator, IRSA, RDS Authentication, AccessDenied, AWS Authentication, AWS IAM external access analyzer