How do I install the AWS Iam skill?

Run npx skillmds add majiayu000/aws-iam-2 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the AWS Iam skill do?

Manage AWS IAM users, roles, policies, and access keys. It is listed under DevOps & Infra on SkillMD.

Is AWS Iam safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with AWS Iam?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is AWS Iam free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published AWS Iam?

majiayu000 (@majiayu000) published this skill. Their other Agent Skills are listed on their SkillMD profile.

AWS Iam by majiayu000 — Agent Skill

Name: AWS Iam
Rating: 4.2 (5 reviews)
Author: majiayu000

File contents

AWS IAM

Manage identity and access management.

List users

aws iam list-users --query 'Users[].{Name:UserName,Created:CreateDate,LastUsed:PasswordLastUsed}' --output table

List roles

aws iam list-roles --query 'Roles[].{Name:RoleName,Created:CreateDate,Path:Path}' --output table | head -30

Get role details

aws iam get-role --role-name my-role | jq '{RoleName: .Role.RoleName, Arn: .Role.Arn, AssumeRolePolicy: .Role.AssumeRolePolicyDocument}'

List attached policies (role)

aws iam list-attached-role-policies --role-name my-role --query 'AttachedPolicies[].{Name:PolicyName,Arn:PolicyArn}' --output table

List inline policies (role)

aws iam list-role-policies --role-name my-role --output table

Get policy document

aws iam get-policy-version --policy-arn arn:aws:iam::123456789:policy/my-policy \
  --version-id v1 | jq '.PolicyVersion.Document'

List access keys

aws iam list-access-keys --user-name my-user --query 'AccessKeyMetadata[].{KeyId:AccessKeyId,Status:Status,Created:CreateDate}' --output table

Get account summary

aws iam get-account-summary | jq '.SummaryMap | {Users, Roles, Policies, Groups, MFADevices: .MFADevicesInUse}'

Simulate policy

aws iam simulate-principal-policy \
  --policy-source-arn arn:aws:iam::123456789:role/my-role \
  --action-names s3:GetObject s3:PutObject \
  --resource-arns "arn:aws:s3:::my-bucket/*" \
  --query 'EvaluationResults[].{Action:EvalActionName,Decision:EvalDecision}' --output table

Notes

IAM is global (not region-specific).
Use simulate-principal-policy to test permissions without making real calls.
Never create or rotate access keys without user confirmation.

---name: aws-iam-2description: Manage AWS IAM users, roles, policies, and access keys.--- # AWS IAM Manage identity and access management. ## List users ```bash aws iam list-users --query 'Users[].{Name:UserName,Created:CreateDate,LastUsed:PasswordLastUsed}' --output table ``` ## List roles ```bash aws iam list-roles --query 'Roles[].{Name:RoleName,Created:CreateDate,Path:Path}' --output table | head -30 ``` ## Get role details ```bash aws iam get-role --role-name my-role | jq '{RoleName: .Role.RoleName, Arn: .Role.Arn, AssumeRolePolicy: .Role.AssumeRolePolicyDocument}' ``` ## List attached policies (role) ```bash aws iam list-attached-role-policies --role-name my-role --query 'AttachedPolicies[].{Name:PolicyName,Arn:PolicyArn}' --output table ``` ## List inline policies (role) ```bash aws iam list-role-policies --role-name my-role --output table ``` ## Get policy document ```bash aws iam get-policy-version --policy-arn arn:aws:iam::123456789:policy/my-policy \ --version-id v1 | jq '.PolicyVersion.Document' ``` ## List access keys ```bash aws iam list-access-keys --user-name my-user --query 'AccessKeyMetadata[].{KeyId:AccessKeyId,Status:Status,Created:CreateDate}' --output table ``` ## Get account summary ```bash aws iam get-account-summary | jq '.SummaryMap | {Users, Roles, Policies, Groups, MFADevices: .MFADevicesInUse}' ``` ## Simulate policy ```bash aws iam simulate-principal-policy \ --policy-source-arn arn:aws:iam::123456789:role/my-role \ --action-names s3:GetObject s3:PutObject \ --resource-arns "arn:aws:s3:::my-bucket/*" \ --query 'EvaluationResults[].{Action:EvalActionName,Decision:EvalDecision}' --output table ``` ## Notes - IAM is global (not region-specific). - Use `simulate-principal-policy` to test permissions without making real calls. - Never create or rotate access keys without user confirmation.

Frequently asked questions