Skip to main content
emisar

AWS IAM operations

v0.1.5

IAM introspection — users, roles, policies, attached policies, access keys — plus incident-response mutators: deactivate access key, delete access key, detach user policy. Auth via AWS_PROFILE. Routine IAM changes belong in IaC; these actions are for emergency lockout.

8 allowed by default 1 need approval by default 2 denied by default
Pack ID
aws-iam
Vendor
emisar
OS
linux
Actions
11
Required binaries. Install these on the host before relying on the pack — an action that calls a missing one fails at run time.
aws

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

on the runner host 
sudo emisar pack install aws-iam --hash sha256:62e9a24cf314ac855c8441a1e2002d39f9463904a14efa71bb97d8f6ab3f10eb

Actions 11 total

View on GitHub
  • iam.deactivate_access_key exec critical

    aws iam update-access-key --status Inactive

    Disable an IAM access key. ALL API calls using this key fail immediately. Use during an incident when a key is suspected compromised — it stops blast radius before rotation completes. Reversible by setting status back to Active.

    View source on GitHub
  • iam.delete_access_key exec critical

    aws iam delete-access-key

    Permanently delete an IAM access key. Irreversible. Use after rotation when the old key is no longer needed. Prefer deactivate_access_key for incident response (it's reversible).

    View source on GitHub
  • iam.detach_user_policy exec high

    aws iam detach-user-policy

    Detach one managed policy from one user. Use to remove overly broad permissions during an incident. The policy itself is not modified; just the attachment.

    View source on GitHub
  • iam.get_role exec low

    aws iam get-role

    Get one IAM role's details + trust policy.

    View source on GitHub
  • iam.get_user exec low

    aws iam get-user

    Get one IAM user's details.

    View source on GitHub
  • iam.last_used_access_key exec low

    aws iam get-access-key-last-used

    Show when one access key was last used (use to spot dormant keys).

    View source on GitHub
  • iam.list_access_keys exec low

    aws iam list-access-keys

    List access key IDs for one user (NOT the secret).

    View source on GitHub
  • iam.list_attached_user_policies exec low

    aws iam list-attached-user-policies

    List policies attached to one IAM user.

    View source on GitHub
  • iam.list_policies exec low

    aws iam list-policies --scope Local

    List all customer-managed IAM policies.

    View source on GitHub
  • iam.list_roles exec low

    aws iam list-roles

    List all IAM roles in the account.

    View source on GitHub
  • iam.list_users exec low

    aws iam list-users

    List all IAM users in the account.

    View source on GitHub
← Back to registry
Pack reference Publish your own →