AWS Identities

This section describes the details pages of the AWS identity objects Forestall enumerates and the relations between them. The objects are listed in Unified Identities under the AWS provider of the Providers filter. It covers three areas: IAM principals and their permissions, the account and organization structure, and AWS IAM Identity Center (formerly AWS SSO). The entity types are below.

Users

Groups

Roles

Policies

Organizations

Accounts

Organizational Units

Identity Center

Permission Sets

SSO Users

SSO Groups