aws-iam-credential-report
Retrieves a credential report for the AWS account.
aws-iam-credential-report [profile=PROFILE]
- profile=PROFILE
- The identifier of AWS connect profile
AWS IAM Policy
To use this command, you must allow the below permissions in your AWS IAM policy:
- iam:GenerateCredentialReport
- iam:GetCredentialReport
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| aws_profile | String | Connect profile | The identifier of AWS connect profile |
| user | String | User | e.g. <root_account>, logpresso |
| arn | String | ARN | arn:aws:iam::ACCOUNT:user/USER |
| user_creation_time | Date | User creation time | |
| mfa_active | Bool | MFA active | Multi-factor authentication |
| access_key_1_active | String | Access key 1 active | |
| access_key_1_last_rotated | Date | Access key 1 last rotated | |
| access_key_1_last_used_date | Date | Access key 1 last used date | |
| access_key_1_last_used_region | String | Access key 1 last used region | e.g. ap-northeast-2 |
| access_key_1_last_used_service | String | Access key 1 last used service | e.g. s3 |
| access_key_2_active | String | Access key 2 active | |
| access_key_2_last_rotated | Date | Access key 2 last rotated | |
| access_key_2_last_used_date | Date | Access key 2 last used date | |
| access_key_2_last_used_region | String | Access key 2 last used region | |
| access_key_2_last_used_service | String | Access key 2 last used service | e.g. acm |
| cert_1_active | String | Certificate 1 active | |
| cert_1_last_rotated | String | Certificate 1 last rotated | |
| cert_2_active | String | Certificate 2 active | |
| cert_2_last_rotated | String | Certificate 2 last rotated | |
| password_enabled | String | Password enabled | e.g. not_supported, true, false |
| password_last_changed | Date | Password last changed | |
| password_last_used | Date | Password last used | |
| password_next_rotation | Date | Password next rotation | |
| report_created_at | Date | Report created at |