IAM

View IAM Users from your terminal

orbit lists IAM Users as a dense, sortable table: 4 columns including User Name, User Id and Arn, fetched with IAM:ListUsers.

Every action on this view is a read, so browsing cannot change anything even in a writable run. Press Enter on a row to drill into iam user policies and iam user groups and iam access keys. IAM is a global service: rows come from us-east-1 no matter which region you select.

Install orbit brew install doughlass/homebrew-tap/orbit

What the IAM Users table shows

Column Source field
User NameUserName
User IdUserId
ArnArn
CreatedCreateDate

Columns with an opt-in flag are hidden by default; press v for the column visibility picker.

Actions on IAM Users

This view has no row actions beyond reading: everything you can do here is navigate, filter, sort and describe. Deeper views such as IAM User Policies, IAM User Groups, IAM Access Keys are reached by pressing Enter on a row.

See how profiles, SSO and regions are resolved.

IAM permissions for this view

Read-only browsing needs IAM:ListUsers plus the standard IAM List and Describe permissions for the surrounding views.

Questions about IAM Users in orbit

What IAM permissions do I need to view IAM Users in orbit?

orbit lists IAM Users with IAM:ListUsers, so a policy granting IAM:ListUsers is enough for read-only browsing of this view.

Is browsing IAM Users safe against a production account?

Read-only is the default. Listing and describing IAM Users performs no mutations.

orbit is not affiliated with or endorsed by Amazon Web Services, Inc. AWS is a trademark of Amazon.com, Inc. orbit is MIT licensed.