> For the complete documentation index, see [llms.txt](https://docs.forestall.io/fsprotect/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/fsprotect/search-and-reports/aws-iam-account.md).

# AWS IAM Account

### AWS IAM Account Fields

| Field           | Type    | Possible Operators                                             | Description                                                                                                                                      |
| --------------- | ------- | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ |
| Guid            | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A unique identifier that is a combination of the GUID of the selected Scan and the AWS Account ID.                                               |
| FSName          | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A special unique identifier that is a combination of the AccountName and the AWS Account ID.                                                     |
| Arn             | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Amazon Resource Name that uniquely identifies this AWS account.                                                                                  |
| AccountId       | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The unique 12-digit identifier assigned to this AWS account.                                                                                     |
| OrganizationId  | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The ID of the AWS Organization that this account belongs to.                                                                                     |
| AccountName     | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The friendly name given to the AWS account, as defined in AWS Organizations.                                                                     |
| AwsAccountId    | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The 12-digit AWS account ID. Equivalent to AccountId; stored for cross-reference purposes.                                                       |
| Email           | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The email address associated with the root user of this AWS account.                                                                             |
| Status          | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The status of the account within the organization. Can be `ACTIVE` or `SUSPENDED`.                                                               |
| JoinedMethod    | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | How the account joined the organization. Can be `INVITED` (accepted an invitation) or `CREATED` (created directly within the organization).      |
| IsMasterAccount | BOOLEAN | N/A                                                            | Indicates whether this is the master (management) account of the AWS Organization. The master account has full control over all member accounts. |
| JoinedDate      | DATE    | SMALLER, LARGER, BETWEEN, EQUAL                                | The date and time when the account joined the AWS Organization.                                                                                  |
| ExposurePoint   | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | A numerical value indicating the level of exposure based on the attack paths reaching this account.                                              |
| risk            | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | The risk score of the account calculated based on vulnerability counts and severities.                                                           |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.forestall.io/fsprotect/search-and-reports/aws-iam-account.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
