Skip to content

AWS IAM Attributes

Schema attributes for resources in the AWS IAM dataset.

AWS IAM Role

Resource ID: aws:iam-role

Resource type: std:account

Identity attribute: arn

Display attribute: roleName

Classification: machine

Attribute Type Description
classification string The classification of the account (for example, machine).
identity string The role ARN.
arn string The ARN of the role.
roleName string The name of the role.
roleId string The ID of the role.
path string The path of the role.
createDate string The creation date of the role.
tags string The tags applied to the role.
roleLastUsedDate string The last used date of the role.
roleLastUsedRegion string The region the role was last used in.
assumeRolePolicyDocument string URL-decoded policy document.
awsRegion string AWS region where the role resides.
awsAccountId string AWS account ID where the role resides.

AWS Role Has Policy

Resource ID: aws:role-has-policy

Resource type: std:access

Attribute Type Description
identity string Unique identifier of the form aws:role-has-policy#{Role ARN}#{Policy ARN or Inline ID}.
from object
to object
linkResolvedBy string ciem-aggregation

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.