Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions,
see Getting Started with Amazon Web Services in China
(PDF).
Use GetServiceLastAccessedDetails
with an Amazon SDK or command line tool
The following code examples show how to use GetServiceLastAccessedDetails
.
- CLI
-
- Amazon CLI
-
To retrieve a service access report
The following get-service-last-accessed-details
example retrieves a previously generated report that lists the services accessed by IAM entities. To generate a report, use the generate-service-last-accessed-details
command.
aws iam get-service-last-accessed-details \
--job-id 2eb6c2b8-7b4c-3xmp-3c13-03b72c8cdfdc
Output:
{
"JobStatus": "COMPLETED",
"JobCreationDate": "2019-10-01T03:50:35.929Z",
"ServicesLastAccessed": [
...
{
"ServiceName": "AWS Lambda",
"LastAuthenticated": "2019-09-30T23:02:00Z",
"ServiceNamespace": "lambda",
"LastAuthenticatedEntity": "arn:aws:iam::123456789012:user/admin",
"TotalAuthenticatedEntities": 6
},
]
}
For more information, see Refining permissions in Amazon using last accessed information in the Amazon IAM User Guide.
- PowerShell
-
- Tools for PowerShell
-
Example 1: This example provides details of the service last accessed by the IAM entity(user, group, role or policy) associated in Request call.
Request-IAMServiceLastAccessedDetail -Arn arn:aws:iam::123456789012:user/TestUser
Output:
f0b7a819-eab0-929b-dc26-ca598911cb9f
Get-IAMServiceLastAccessedDetail -JobId f0b7a819-eab0-929b-dc26-ca598911cb9f
For a complete list of Amazon SDK developer guides and code examples, see
Using IAM with an Amazon SDK.
This topic also includes information about getting started and details about previous SDK versions.