> For the complete documentation index, see [llms.txt](https://docs.forestall.io/fsprotect/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/fsprotect/search-and-reports/aws-entities/aws-iam-role.md).

# IAM Role

### AWS IAM Role Fields

| Field               | Type    | Possible Operators                                             | Description                                                                                                                        |
| ------------------- | ------- | -------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------- |
| Guid                | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A unique identifier that is a combination of the GUID of the selected Scan and the AWS IAM Role's unique ID.                       |
| FSName              | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A special unique identifier that is a combination of the RoleName and the AWS Account ID.                                          |
| Arn                 | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Amazon Resource Name that uniquely identifies this IAM role across all of AWS.                                                     |
| AccountId           | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The AWS account ID that this IAM role belongs to.                                                                                  |
| Region              | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The AWS region associated with this IAM role.                                                                                      |
| OrganizationId      | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The AWS Organizations ID that this role's account belongs to.                                                                      |
| RoleName            | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The friendly name that identifies the IAM role.                                                                                    |
| Description         | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A description of the role provided by the administrator.                                                                           |
| Path                | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The path to the role in the IAM hierarchy. Used to organize roles.                                                                 |
| PermissionsBoundary | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The ARN of the policy used to set the permissions boundary for the role. Limits the maximum permissions the role can have.         |
| MaxSessionDuration  | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | The maximum session duration (in seconds) for the role. Valid values are between 3600 and 43200.                                   |
| IsPrivileged        | BOOLEAN | N/A                                                            | Indicates whether the role has been identified as privileged based on its effective permissions.                                   |
| IsServiceLinkedRole | BOOLEAN | N/A                                                            | Indicates whether this is an AWS service-linked role. These roles are pre-defined by AWS services and cannot be manually modified. |
| IsStealth           | BOOLEAN | N/A                                                            | Indicates that the role can compromise admin objects with at least one attack path without being an explicit admin role.           |
| IsInactive          | BOOLEAN | N/A                                                            | Indicates whether the role has not been used for longer than the defined inactivity threshold.                                     |
| AWSTier             | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Privilege tier of the role based on its effective permissions. Higher values indicate greater privilege.                           |
| CreateDate          | DATE    | SMALLER, LARGER, BETWEEN, EQUAL                                | The date and time when the IAM role was created.                                                                                   |
| RoleLastUsed        | DATE    | SMALLER, LARGER, BETWEEN, EQUAL                                | The date and time when the role was last used to make an AWS API call.                                                             |
| ExposurePoint       | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | A numerical value indicating the level of exposure based on how many other entities can reach this role through attack paths.      |
| risk                | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | The risk score of the role calculated based on vulnerability counts and severities.                                                |