GetAccountAuthorizationDetails

Source: src/AWS/IAM/GetAccountAuthorizationDetails.ts

Runtime binding for iam:GetAccountAuthorizationDetails — snapshot every IAM user, group, role, and policy in the account together with their relationships. The single-call foundation for permission-graph analyzers and drift detectors.

Account-singleton operation: the binding takes no arguments and grants iam:GetAccountAuthorizationDetails on *. Provide the implementation with Effect.provide(AWS.IAM.GetAccountAuthorizationDetailsHttp).

Account Auditing

// init
const getAuthorizationDetails = yield* IAM.GetAccountAuthorizationDetails();

// runtime — paginate with the Marker until IsTruncated is false
const page = yield* getAuthorizationDetails({
  Filter: ["Role"],
  MaxItems: 100,
});
const roles = page.RoleDetailList ?? [];