Manage IAM roles, policies, instance profiles, and access keys.
| Action | Description | Parameters | Returns |
|---|---|---|---|
add_role_to_instance_profile | Add a role to an instance profile | instance_profile_name, role_name | dict |
attach_role_policy | Attach a managed policy to a role | role_name, policy_arn | dict |
create_access_key | Create an access key for a user | [user_name] | IAMAccessKey |
create_instance_profile | Create an instance profile | instance_profile_name [path] | IAMInstanceProfile |
create_policy | Create an IAM policy | policy_name, policy_document [description, path] | IAMPolicy |
create_role | Create an IAM role | role_name, assume_role_policy_document [description, path] | IAMRole |
delete_access_key ⚠ | Delete an access key | access_key_id [user_name] | dict |
delete_policy ⚠ | Delete an IAM policy | policy_arn | dict |
delete_role ⚠ | Delete an IAM role | role_name | dict |
detach_role_policy | Detach a managed policy from a role | role_name, policy_arn | dict |
get_policy | Get an IAM policy | policy_arn | IAMPolicy |
get_role | Get an IAM role | role_name | IAMRole |
get_user | Get the current IAM user | [user_name] | IAMUser |
list_access_keys | List access keys for a user | [user_name] | list |
list_attached_role_policies | List managed policies attached to a role | role_name | list |
list_instance_profiles | List instance profiles | [path_prefix] | list |
list_policies | List IAM policies | [scope, only_attached] | list |
list_roles | List IAM roles | [path_prefix] | list |
list_users | List IAM users | [path_prefix] | list |
remove_role_from_instance_profile | Remove a role from an instance profile | instance_profile_name, role_name | dict |
Full schema explorer, code generation, and live API testing