> For the complete documentation index, see [llms.txt](https://docs.forestall.io/fsprotect/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/fsprotect/search-and-reports/aws-entities/aws-iam-account.md).

# IAM Account

### AWS IAM Account Fields

| Field           | Type    | Possible Operators                                             | Description                                                                                                                                      |
| --------------- | ------- | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ |
| Guid            | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A unique identifier that is a combination of the GUID of the selected Scan and the AWS Account ID.                                               |
| FSName          | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A special unique identifier that is a combination of the AccountName and the AWS Account ID.                                                     |
| Arn             | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Amazon Resource Name that uniquely identifies this AWS account.                                                                                  |
| AccountId       | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The unique 12-digit identifier assigned to this AWS account.                                                                                     |
| OrganizationId  | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The ID of the AWS Organization that this account belongs to.                                                                                     |
| AccountName     | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The friendly name given to the AWS account, as defined in AWS Organizations.                                                                     |
| AwsAccountId    | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The 12-digit AWS account ID. Equivalent to AccountId; stored for cross-reference purposes.                                                       |
| Email           | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The email address associated with the root user of this AWS account.                                                                             |
| Status          | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The status of the account within the organization. Can be `ACTIVE` or `SUSPENDED`.                                                               |
| JoinedMethod    | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | How the account joined the organization. Can be `INVITED` (accepted an invitation) or `CREATED` (created directly within the organization).      |
| IsMasterAccount | BOOLEAN | N/A                                                            | Indicates whether this is the master (management) account of the AWS Organization. The master account has full control over all member accounts. |
| JoinedDate      | DATE    | SMALLER, LARGER, BETWEEN, EQUAL                                | The date and time when the account joined the AWS Organization.                                                                                  |
| ExposurePoint   | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | A numerical value indicating the level of exposure based on the attack paths reaching this account.                                              |
| risk            | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | The risk score of the account calculated based on vulnerability counts and severities.                                                           |