AWS IAM Role

Copy page

AWS IAM Role Fields

Field	Type	Possible Operators	Description
Guid	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	A unique identifier that is a combination of the GUID of the selected Scan and the AWS IAM Role’s unique ID.
FSName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	A special unique identifier that is a combination of the RoleName and the AWS Account ID.
Arn	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Amazon Resource Name that uniquely identifies this IAM role across all of AWS.
AccountId	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	The AWS account ID that this IAM role belongs to.
RoleName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	The friendly name that identifies the IAM role.
Description	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	A description of the role provided by the administrator.
MaxSessionDuration	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	The maximum session duration (in seconds) for the role. Valid values are between 3600 and 43200.
IsPrivileged	BOOLEAN	N/A (toggle)	Indicates whether the role has been identified as privileged based on its effective permissions.
IsServiceLinkedRole	BOOLEAN	N/A (toggle)	Indicates whether this is an AWS service-linked role. These roles are pre-defined by AWS services and cannot be manually modified.
IsInactive	BOOLEAN	N/A (toggle)	Indicates whether the role has not been used for longer than the defined inactivity threshold.
AWSTier	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	Privilege tier of the role based on its effective permissions. Higher values indicate greater privilege.
CreateDate	DATE	SMALLER, LARGER, BETWEEN, EQUAL, IS_EMPTY	The date and time when the IAM role was created.
RoleLastUsed	DATE	SMALLER, LARGER, BETWEEN, EQUAL, IS_EMPTY	The date and time when the role was last used to make an AWS API call.
ExposurePoint	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	A numerical value indicating the level of exposure based on how many other entities can reach this role through attack paths.
risk	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	The risk score of the role calculated based on vulnerability counts and severities.
IsShadow	BOOLEAN	N/A (toggle)	Indicates that the role can compromise admin objects with at least one attack path without being an explicit admin role.