This workflow template detects unused or inactive AWS IAM roles to enhance Identity and Access Management security. It queries IAM for role details, groups roles by last used or never used status, and filters based on specified days, identifying potential security risks for remediation.
Optional Triggers
"This workflow should be used as a function."
Use Cases
Function, Identity and Access Management
Workflow Breakdown
Queries AWS for RoleDetailList
Groups roles without RoleLastUsed data and filters by the date of creation.
Groups roles with RoleLastUsed data and filters by the date of last usage
Vendors
AWS, Utils
Workflow Output
Lists of grouped roles filtered by an amount of days.