Discover Unused Roles

Discover IAM roles not used over a certain amount of days.

Source code • Permissions

Usage

Input

Parameter Description Type Required Default value
threshold_days Get roles not used for more than this number of days int Yes None
region Region for operation string No Session default
debug Increase log verbosity bool No False
silent Decrease log verbosity bool No False
output Output format
table		 string No None
session Established session object No None

Output

Returns a list of discovered roles:

['role1', 'role2']

Examples

Discover roles not used for more than 100 days:

aaws iam discover_unused_roles --threshold_days 100