View IAM Roles from your terminal
orbit lists IAM Roles as a dense, sortable table: 4 columns including Role Name, Role Id and Arn, fetched with IAM:ListRoles.
Every action on this view is a read, so browsing cannot change anything even in a writable run. Press Enter on a row to drill into iam role policies and iam inline policies. IAM is a global service: rows come from us-east-1 no matter which region you select.
brew install doughlass/homebrew-tap/orbit
What the IAM Roles table shows
| Column | Source field |
|---|---|
| Role Name | RoleName |
| Role Id | RoleId |
| Arn | Arn |
| Created | CreateDate |
Columns with an opt-in flag are hidden by default; press v for the column visibility picker.
Actions on IAM Roles
This view has no row actions beyond reading: everything you can do here is navigate, filter, sort and describe. Deeper views such as IAM Role Policies, IAM Inline Policies are reached by pressing Enter on a row.
See how profiles, SSO and regions are resolved.
IAM permissions for this view
Read-only browsing needs IAM:ListRoles
plus the standard IAM List and Describe permissions for the surrounding views.
Questions about IAM Roles in orbit
What IAM permissions do I need to view IAM Roles in orbit?
orbit lists IAM Roles with IAM:ListRoles, so a policy granting IAM:ListRoles is enough for read-only browsing of this view.
Is browsing IAM Roles safe against a production account?
Read-only is the default. Listing and describing IAM Roles performs no mutations.
Related views
orbit is not affiliated with or endorsed by Amazon Web Services, Inc. AWS is a trademark of Amazon.com, Inc. orbit is MIT licensed.