{"id":6,"slug":"iam-aws-iam","cloud":"aws","service":"iam","title":"AWS IAM (IAM)","description":"AWS Identity and Access Management (IAM) manages users, roles, and permissions for AWS resources.","category":"security","common_permissions":["iam:CreateRole","iam:DeleteRole","iam:GetRole","iam:ListRoles","iam:CreateUser","iam:DeleteUser","iam:GetUser","iam:ListUsers"],"least_privilege_example":"{\n  \"Version\": \"2012-10-17\",\n  \"Statement\": [\n    {\n      \"Effect\": \"Allow\",\n      \"Action\": [\n        \"iam:CreateRole\",\n        \"iam:DeleteRole\",\n        \"iam:GetRole\",\n        \"iam:ListRoles\",\n        \"iam:CreateUser\",\n        \"iam:DeleteUser\",\n        \"iam:GetUser\",\n        \"iam:ListUsers\"\n      ],\n      \"Resource\": \"*\"\n    }\n  ]\n}","warnings":["Avoid iam:* — grants full control including deletion of roles and users.","Avoid iam:PassRole without conditions — can allow privilege escalation."],"docs":"https://servicereference.us-east-1.amazonaws.com/v1/iam/iam.json","tags":["iam","aws"],"last_verified":"2026-06-14T00:00:00+00:00","next_check":"2026-12-11","created_at":"2026-06-14T04:48:32.466489+00:00","updated_at":"2026-06-14T04:48:32.466489+00:00"}