ListPoliciesGrantingServiceAccess

Source: src/AWS/IAM/ListPoliciesGrantingServiceAccess.ts

Runtime binding for iam:ListPoliciesGrantingServiceAccess — list which attached/inline policies grant an IAM user, group, or role access to given service namespaces. The companion to access advisor for answering “why can this entity reach that service?”.

The entity (Arn) is chosen per request, so the binding takes no arguments and grants iam:ListPoliciesGrantingServiceAccess on *. Provide the implementation with Effect.provide(AWS.IAM.ListPoliciesGrantingServiceAccessHttp).

Access Advisor

// init
const listPoliciesGrantingServiceAccess =
  yield* IAM.ListPoliciesGrantingServiceAccess();

// runtime
const { PoliciesGrantingServiceAccess } =
  yield* listPoliciesGrantingServiceAccess({
    Arn: roleArn,
    ServiceNamespaces: ["s3"],
  });