Roles
Roles
The Roles page provides a list of enumerated IAM roles in the entire AWS environment. The list contains the Privileged, Tier 0, Service Linked, Inactive, Risk Score, Exposure Point and Issue Counts.
Role Details
Details page contains the Risk Score of the role, Exposure Point, Information and Issues panes.
You can analyze objects in the Graph module by clicking the Visualize button on the upper left side of the Information Pane.
Information
Information Pane can contain different badges to highlight important attributes.
Privileged
Indicates that the object is Privileged.
Tier
Indicates that the object tier according to risk score and importance.
Inactive
Indicates that the role has not been used for a defined period.
Service Linked
Indicates that the role is an AWS service-linked role managed by an AWS service.
Shadow Admin
Indicates that the object can compromise admin objects with at least one attack path.
Information Pane contains Details and Policies tabs.
Details
Details tab contains attributes below about the IAM role object.
Role Name
The name of the IAM role, used for identification within AWS.
Role ID
The unique identifier assigned to the IAM role by AWS.
ARN
The Amazon Resource Name that uniquely identifies the IAM role across AWS.
Account ID
The AWS account ID that the IAM role belongs to.
Description
A user-defined text field describing the role's purpose or intended use.
Path
The path associated with the IAM role, used for organizational grouping.
Created
The date and time when the IAM role was created.
Last Used
The most recent date and time the role was assumed; blank if never used.
Max Session Duration
The maximum duration in seconds for a session when assuming the role.
Permissions Boundary
The managed policy used to set the maximum permissions for the role; blank if not set.
Source Tenant
The name of the tenant or configuration source from which the role was scanned.
Object ID
The unique identifier of the role object, equivalent to the IAM Role ID.
Policies
Policies tab contains a list of IAM policies attached to the role, including both managed and inline policies. This list also contains columns such as AWS Managed and Grants Admin Privileges to identify the scope and risk level of each policy.
Issues
Issues pane contains identified security issues on the IAM role object.
Last updated
Was this helpful?