Console User Report

Question

I need to produce a report showing which AWS Console users have been added, modified or removed during the past year.  Is this possible?  The report was requested by an auditor.

Answer

You can use CloudTrail logs to check for the corresponding events (CreateUser, DeleteUser, etc.) and additionally use [Athena to search through the CloudTrail logs] (https://aws.amazon.com/premiumsupport/knowledge-center/athena-tables-search-cloudtrail-logs/) easier.

IAM currently only have a built-in reporting available ([_credential report_](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html)), that lists all **current** users in your account and the status of their credentials.

Console User Report

Relevanter Inhalt