IAM / security / iam

AWS IAM (IAM)

JSON →

AWSiamsecurity

AWS Identity and Access Management (IAM) manages users, roles, and permissions for AWS resources.

iamaws

docs ↗

Permissions

Actions in this service

iam:CreateRole

iam:DeleteRole

iam:GetRole

iam:ListRoles

iam:CreateUser

iam:DeleteUser

iam:GetUser

iam:ListUsers

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "iam:CreateRole", "iam:DeleteRole", "iam:GetRole", "iam:ListRoles", "iam:CreateUser", "iam:DeleteUser", "iam:GetUser", "iam:ListUsers" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid iam:* — grants full control including deletion of roles and users.

Avoid iam:PassRole without conditions — can allow privilege escalation.

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/iam/iam.json ↗