# AWS IAM Attributes

Schema attributes for resources in the **AWS IAM** dataset.

## AWS IAM Role

**Resource ID**: `aws:iam-role`

**Resource type**: `std:account`

**Identity attribute**: `arn`

**Display attribute**: `roleName`

**Classification**: `machine`

| Attribute | Type | Description |
| --- | --- | --- |
| `classification` | string | The classification of the account (for example, machine). |
| `identity` | string | The role ARN. |
| `arn` | string | The ARN of the role. |
| `roleName` | string | The name of the role. |
| `roleId` | string | The ID of the role. |
| `path` | string | The path of the role. |
| `createDate` | string | The creation date of the role. |
| `tags` | string | The tags applied to the role. |
| `roleLastUsedDate` | string | The last used date of the role. |
| `roleLastUsedRegion` | string | The region the role was last used in. |
| `assumeRolePolicyDocument` | string | URL-decoded policy document. |
| `awsRegion` | string | AWS region where the role resides. |
| `awsAccountId` | string | AWS account ID where the role resides. |

## AWS Role Has Policy

**Resource ID**: `aws:role-has-policy`

**Resource type**: `std:access`

| Attribute | Type | Description |
| --- | --- | --- |
| `identity` | string | Unique identifier of the form aws:role-has-policy\#{Role ARN}\#{Policy ARN or Inline ID}. |
| `from` | object |  |
| `to` | object |  |
| `linkResolvedBy` | string | ciem-aggregation |