Agent skill

aws-iam

Manage AWS IAM users, roles, policies, and access keys.

Stars 163
Forks 31

Install this agent skill to your Project

npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/other/other/aws-iam-thinkfleetai-thinkfleet-engine

Metadata

Additional technical details for this skill

thinkfleetbot
{
    "emoji": "\ud83d\udd10",
    "requires": {
        "env": [
            "AWS_ACCESS_KEY_ID",
            "AWS_SECRET_ACCESS_KEY"
        ],
        "bins": [
            "aws",
            "jq"
        ]
    }
}

SKILL.md

AWS IAM

Manage identity and access management.

List users

bash
aws iam list-users --query 'Users[].{Name:UserName,Created:CreateDate,LastUsed:PasswordLastUsed}' --output table

List roles

bash
aws iam list-roles --query 'Roles[].{Name:RoleName,Created:CreateDate,Path:Path}' --output table | head -30

Get role details

bash
aws iam get-role --role-name my-role | jq '{RoleName: .Role.RoleName, Arn: .Role.Arn, AssumeRolePolicy: .Role.AssumeRolePolicyDocument}'

List attached policies (role)

bash
aws iam list-attached-role-policies --role-name my-role --query 'AttachedPolicies[].{Name:PolicyName,Arn:PolicyArn}' --output table

List inline policies (role)

bash
aws iam list-role-policies --role-name my-role --output table

Get policy document

bash
aws iam get-policy-version --policy-arn arn:aws:iam::123456789:policy/my-policy \
  --version-id v1 | jq '.PolicyVersion.Document'

List access keys

bash
aws iam list-access-keys --user-name my-user --query 'AccessKeyMetadata[].{KeyId:AccessKeyId,Status:Status,Created:CreateDate}' --output table

Get account summary

bash
aws iam get-account-summary | jq '.SummaryMap | {Users, Roles, Policies, Groups, MFADevices: .MFADevicesInUse}'

Simulate policy

bash
aws iam simulate-principal-policy \
  --policy-source-arn arn:aws:iam::123456789:role/my-role \
  --action-names s3:GetObject s3:PutObject \
  --resource-arns "arn:aws:s3:::my-bucket/*" \
  --query 'EvaluationResults[].{Action:EvalActionName,Decision:EvalDecision}' --output table

Notes

  • IAM is global (not region-specific).
  • Use simulate-principal-policy to test permissions without making real calls.
  • Never create or rotate access keys without user confirmation.

Expand your agent's capabilities with these related and highly-rated skills.

Didn't find tool you were looking for?

Be as detailed as possible for better results