How do I find out if an IAM role is in used

Question

I am doing some house cleaning for IAM roles.
1) How do I filter by roles that are manually created
2) How do I find out the dependency of each role (if any)

Accepted Answer

Hello.

> How do I filter by roles that are manually created

I find it difficult to filter manually created ones.  
IAM roles that are automatically created when using AWS services often start with the prefix "Amazon" or "AWS".

> How do I find out the dependency of each role (if any)

To check when an IAM role was used, I think it's a good idea to check "Last activity" on the IAM role screen.  
![a](/media/postImages/original/IMqCmjWpjIQbuSlhDZj7Myxw)

You may be able to see which resources used an IAM role in CloudTrail's API history.  
https://repost.aws/knowledge-center/view-iam-history

How do I find out if an IAM role is in used

Relevant content