[IAM] Programmatically list all users with console access enabled

0

ListUsers only contains 'PasswordLastUsed' which isn't suitable to use for this purpose.

asked 2 years ago1574 views
2 Answers
1
Accepted Answer

A login profile is required for console access, so any IAM user with a login profile has access to the console.

So, using the CLI or API that fits your use case:

  1. list-users
  2. for each user
  3. get-login-profile --user-name <user>
  4. If no login profile then they do not have console access.
AWS
Mike_O
answered 2 years ago
profile picture
EXPERT
reviewed 18 days ago
profile picture
EXPERT
reviewed 23 days ago
0

You can find this information in a Credentials Report. See: Getting credential reports for your AWS account. You will need to parse the report but the data you are looking for is in there.

profile pictureAWS
EXPERT
kentrad
answered 2 years ago
profile picture
EXPERT
reviewed 23 days ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions