By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

[IAM] Programmatically list all users with console access enabled

0

ListUsers only contains 'PasswordLastUsed' which isn't suitable to use for this purpose.

Topics
Security, Identity, & Compliance
Tags
Security, Identity, & Compliance
Language
English
DT-AWSForums
asked 3 years ago2K views
2 Answers
1
Accepted Answer

A login profile is required for console access, so any IAM user with a login profile has access to the console.

So, using the CLI or API that fits your use case:

  1. list-users
  2. for each user
  3. get-login-profile --user-name <user>
  4. If no login profile then they do not have console access.
AWS
Mike_O
answered 3 years ago
profile picture
EXPERT
Oleksii Bebych
reviewed 9 months ago
profile picture
EXPERT
Gary Mclean
reviewed 9 months ago
0

You can find this information in a Credentials Report. See: Getting credential reports for your AWS account. You will need to parse the report but the data you are looking for is in there.

profile pictureAWS
EXPERT
kentrad
answered 3 years ago
profile picture
EXPERT
Gary Mclean
reviewed 9 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content