AWS IAM Service Tables
The AWS IAM Service uses the following table
Tables
AWSAccountSummaries
| Name | Type | Description |
|---|---|---|
| AccessKeysPerUserQuota | integer | The maximum number of access keys that can be created per IAM user. |
| AccountAccessKeysPresent | integer | The number of AWS account root user access keys present in the account. |
| AccountMFAEnabled | integer | Indicates whether multi-factor authentication (MFA) is enabled for the AWS account. A value of 1 means MFA is enabled; 0 means it is not. |
| AccountSigningCertificatesPresent | integer | The number of signing certificates present for the AWS account root user. |
| AssumeRolePolicySizeQuota | integer | The maximum allowed size for assume role policy documents, in bytes. |
| AttachedPoliciesPerGroupQuota | integer | The maximum number of managed policies that can be attached to an IAM group. |
| AttachedPoliciesPerRoleQuota | integer | The maximum number of managed policies that can be attached to an IAM role. |
| AttachedPoliciesPerUserQuota | integer | The maximum number of managed policies that can be attached to an IAM user. |
| BatchDate | integer | The date and time when the activity logs were batch-processed or recorded |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry. |
| CreatedBy | integer | Identifier of the entity that created the record or configuration. |
| CreatedDate | integer | The date and time when the record or configuration was created. |
| GlobalEndpointTokenVersion | integer | The version of the global endpoint token. |
| GroupPolicySizeQuota | integer | The maximum allowed size for inline policy documents in an IAM group, in bytes. |
| Groups | integer | The number of IAM groups in the AWS account. |
| GroupsPerUserQuota | integer | The maximum number of IAM groups a user can be a member of. |
| GroupsQuota | integer | The maximum number of IAM groups allowed in the AWS account. |
| ID | integer | A unique identifier for the record or entity. |
| InstanceProfiles | integer | The number of instance profiles in the AWS account. |
| InstanceProfilesQuota | integer | The maximum number of instance profiles allowed in the AWS account. |
| MFADevices | integer | The number of MFA devices in the AWS account. |
| MFADevicesInUse | integer | The number of MFA devices currently in use. |
| ModifiedBy | integer | Identifier of the entity that last modified the record or configuration. |
| ModifiedDate | integer | The date and time when the record or configuration was last modified. |
| Policies | integer | The number of customer-managed policies in the AWS account. |
| PoliciesQuota | integer | The maximum number of customer-managed policies allowed in the AWS account. |
| PolicySizeQuota | integer | The maximum allowed size for managed policy documents, in bytes. |
| PolicyVersionsInUse | integer | The number of policy versions currently in use in the AWS account. |
| PolicyVersionsInUseQuota | integer | The maximum number of policy versions allowed in the AWS account. |
| Providers | integer | The number of identity providers in the AWS account. |
| RolePolicySizeQuota | integer | The maximum allowed size for inline policy documents in an IAM role, in bytes. |
| Roles | integer | The number of IAM roles in the AWS account. |
| RolesQuota | integer | The maximum number of IAM roles allowed in the AWS account. |
| ServerCertificates | string | The number of server certificates stored in IAM. |
| ServerCertificatesQuota | datetime | The maximum number of server certificates allowed in IAM. |
| SigningCertificatesPerUserQuota | string | The maximum number of signing certificates allowed per IAM user. |
| UserPolicySizeQuota | datetime | The maximum allowed size for inline policy documents in an IAM user, in bytes. |
| Users | datetime | The number of IAM users in the AWS account. |
| UsersQuota | integer | The maximum number of IAM users allowed in the AWS account. |
| VersionsPerPolicyQuota | integer | The maximum number of versions that can exist for a policy. |
AWSGroups
| Name | Type | Description |
|---|---|---|
| Arn | string | The Amazon Resource Name (ARN) specifying the group. |
| Path | string | The path to the group. |
| GroupName | string | The friendly name that identifies the group. |
| CreateDate | datetime | The date and time, in ISO 8601 date-time format, when the group was created. |
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry. |
| GroupID | string | A unique identifier for the group. |
AWSInlinePolicies
| Name | Type | Description |
|---|---|---|
| AWSGroupConfigID | integer | A unique identifier for the configuration associated with the group. |
| AWSRoleConfigID | integer | A unique identifier for the configuration associated with the role. |
| AWSUserConfigID | integer | A unique identifier for the configuration associated with the user. |
| PolicyName | string | The name of the policy. |
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
| ParentType | string | The type of entity to which the inline policy is attached. This defines the scope of the policy (e.g., User, Group, Role). |
| ParentName | string | The name of the entity (such as a specific IAM user, group, or role) to which the inline policy is attached. This corresponds to the UserName, GroupName, or RoleName. |
| CreateDate | datetime | The date and time, in ISO 8601 date-time format, when the policy was created. |
| Document | string | The policy document. |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry. |
| AWSGroupGroupID | string | A unique identifier for the group. |
| AWSRoleRoleID | string | The stable and unique string identifying the role. |
| AWSUserUserID | string | The stable and unique string identifying the user. |
AWSManagedPolicies
| Name | Type | Description |
|---|---|---|
| Arn | string | The Amazon Resource Name (ARN) that uniquely identifies the policy. |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry. |
| PermissionsBoundaryUsageCount | integer | The number of entities (users or roles) for which the policy is used as a permissions boundary. |
| Path | string | The path to the policy. The default is /. |
| UpdateDate | datetime | The date and time, in ISO 8601 date-time format, when the policy was last updated. |
| IsAttachable | bit | Specifies whether the policy can be attached to an IAM user, group, or role. A value of true indicates that the policy can be attached; false indicates that the policy cannot be attached. |
| PolicyName | string | The friendly name (not ARN) identifying the policy. |
| AttachmentCount | integer | The number of entities (users, groups, and roles) that the policy is attached to. |
| Description | string | A friendly description of the policy. |
| Document | string | The policy document. The policy document is returned in JSON format. |
| CreateDate | datetime | The date and time, in ISO 8601 date-time format, when the policy was created. |
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
| DefaultVersionID | string | The identifier for the version of the policy that is set as the default version. |
| PolicyID | string | The stable and unique string identifying the policy. |
| VersionID | string | The identifier for a specific version of the policy. |
AWSMFADevices
| Name | Type | Description |
|---|---|---|
| AWSUserConfigID | integer | An identifier linking the MFA device to a specific AWS user configuration. |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry. |
| SerialNumber | string | The unique identifier assigned to the MFA device. For virtual MFA devices, this is typically an Amazon Resource Name (ARN). |
| EnableDate | datetime | The date and time when the MFA device was enabled for the user, in ISO 8601 date-time format. |
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
| AWSUserID | string | A unique identifier for the AWS user associated with the MFA device. |
| UserID | string | An internal identifier for the user to whom the MFA device is assigned. |
AWSRoles
| Name | Type | Description |
|---|---|---|
| Arn | string | The Amazon Resource Name (ARN) that uniquely identifies the IAM role. |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry. |
| Path | string | The path to the role. |
| AssumeRolePolicyDocument | string | The trust policy that grants an entity permission to assume the role. This policy is URL-encoded as per RFC 3986. |
| MaxSessionDuration | integer | The maximum session duration (in seconds) that you want to set for the specified role. This setting can have a value from 1 hour (3600 seconds) to 12 hours (43200 seconds). |
| RoleName | string | The friendly name that identifies the role. |
| RoleLastUsed | datetime | Contains information about the last time that an IAM role was used. This includes the date and time and the Region in which the role was last used. Activity is only reported for the trailing 400 days. |
| CreatedBy | string | Identifier of the entity that created the role. |
| CreatedDate | datetime | The date and time when the role was created. |
| ModifiedBy | string | Identifier of the entity that last modified the role. |
| ModifiedDate | datetime | The date and time when the role was last modified. |
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
| CreateDate | datetime | The date and time when the role was created, in ISO 8601 date-time format. |
| RoleID | string | The stable and unique string identifying the role. |
AWSUsers
| Name | Type | Description |
|---|---|---|
| Arn | string | The Amazon Resource Name (ARN) that uniquely identifies the IAM user. |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry. |
| Path | string | The path to the user. |
| UserName | string | The friendly name identifying the user. |
| CreateDate | datetime | he date and time when the user was created, in ISO 8601 date-time format. |
| PasswordLastUsed | datetime | The date and time, in ISO 8601 date-time format, when the user's password was last used to sign in to an AWS website. |
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
| UserID | string | The stable and unique string identifying the user. |
Bridge Tables
AWSGroups_AWSManagedPolicies
| Name | Type | Description |
|---|---|---|
| AWSGroupConfigID | integer | A unique identifier for the configuration associated with the group. |
| AWSManagedPolicyConfigID | integer | A unique identifier for the configuration associated with the managed policy. |
| AWSGroupID | string | A unique identifier for the group. |
| AWSManagedPolicyID | string | The stable and unique string identifying the policy. |
| AWSManagedPolicyVersionID | string | The identifier for a specific version of the policy. |
AWSGroups_AWSUsers
| Name | Type | Description |
|---|---|---|
| AWSGroupConfigID | integer | A unique identifier for the configuration associated with the group. |
| AWSUserConfigID | integer | A unique identifier for the configuration associated with the user. |
| AWSGroupID | string | A unique identifier for the group. |
| AWSUserID | string | The stable and unique string identifying the user. |
AWSManagedPolicies_AWSRoles
| Name | Type | Description |
|---|---|---|
| AWSManagedPolicyConfigID | integer | A unique identifier for the configuration associated with the managed policy. |
| AWSRoleConfigID | integer | A unique identifier for the configuration associated with the role. |
| AWSManagedPolicyID | string | The stable and unique string identifying the policy. |
| AWSManagedPolicyVersionID | string | The identifier for a specific version of the policy. |
| AWSRoleID | string | The stable and unique string identifying the role. |
AWSManagedPolicies_AWSUsers
| Name | Type | Description |
|---|---|---|
| AWSManagedPolicyConfigID | integer | A unique identifier for the configuration associated with the managed policy. |
| AWSUserConfigID | integer | A unique identifier for the configuration associated with the user. |
| AWSManagedPolicyID | string | The stable and unique string identifying the policy. |
| AWSManagedPolicyVersionID | string | The identifier for a specific version of the policy. |
| AWSUserID | string | The stable and unique string identifying the user. |
Updated over 1 year ago
Learn more...
Did this page help you?