9 docs tagged with "iam"

Lists the cross-account credentials and root storage configurations registered in a Databricks account; the prerequisites a workspace is built from.

Lists the principals assigned to a Databricks workspace with their permission level, resolving users, groups and service principals into one view.

Lists IAM service accounts in one project with email, display name and unique id; the workload principal inventory for a privilege audit.

Lists a user's access keys with their age in days; keys older than the rotation window are the finding.

Assesses the IAM account password policy against CIS AWS Foundations Benchmark password controls, returning raw values and per-control PASS/FAIL verdicts.

Inventories the SAML and OIDC identity providers registered in the account; the trusted federation surface behind assumable roles.

Lists IAM roles whose trust policy admits principals from other AWS accounts, flagging external id and federation use; the cross-account exposure surface.

Enumerates IAM users in the account; IAM is global and always served from us-east-1, so the query takes no parameters.

Lists IAM users alongside whether they have a virtual MFA device registered; console-capable users without MFA are the finding.