IAM Security Tools within AWS

Reporting-wise there is the IAM Credentials Report which is based at account level and will display a list of all the account’s users and their various credentials status


IAM Access Advisor which is based at the user level and will show a list of all the service permissions which have been granted to a user and when the services were last accessed.


The IAM Access Advisor can be used to audit and revise use permissions if necessary.