GCP add-iam-policy-binding
Adds a role binding through a resource-specific IAM policy update.
Tag: IAM
IAM
All events with tag IAM.
AWS AddRoleToInstanceProfile
Adds one IAM role to an existing instance profile.
AWS AddUserToGroup
Adds an IAM user to a group, changing the policies that apply to the user.
AWS AttachGroupPolicy
Attaches a managed permissions policy to an IAM group.
AWS AttachRolePolicy
Attaches a managed permissions policy to an IAM role.
AWS AttachUserPolicy
Attaches a managed permissions policy to an IAM user.
AWS ChangePassword
Changes the calling IAM user’s console password.
AWS CreateAccessKey
Creates a new long-term access key for an IAM user, enabling programmatic access to AWS services.
AWS CreateLoginProfile
Creates a console password for an IAM user.
AWS CreateOpenIDConnectProvider
Registers an OIDC identity provider in IAM.
AWS CreatePolicy
Creates a customer-managed IAM policy with an initial default version.
AWS CreatePolicyVersion
Creates a customer-managed policy version, optionally making it the operative version.
AWS CreateRole
Creates an IAM role with a trust policy and optional role settings.
GCP CreateRole
Creates a custom IAM role definition.
AWS CreateSAMLProvider
Registers SAML identity-provider metadata in IAM.
AWS CreateServiceLinkedRole
Creates an IAM role linked to a specific AWS service.
AWS CreateUser
Creates an IAM user without automatically creating sign-in credentials.
AWS CreateVirtualMFADevice
Creates a virtual MFA device that must be enabled separately for an IAM user.
AWS DeactivateMFADevice
Deactivates a specified MFA device and removes its association with a user.
AWS DeleteAccessKey
Deletes an IAM access key permanently.
AWS DeleteLoginProfile
Deletes the target user’s AWS console password without deleting access keys.
AWS DeleteRolePermissionsBoundary
Removes the permissions boundary on an IAM role, potentially changing effective access.
AWS DeleteRolePolicy
Deletes a named inline permissions policy from an IAM role.
AWS DeleteUser
Deletes an IAM user after dependent credentials and associations are removed.
AWS DeleteUserPermissionsBoundary
Removes the permissions boundary on an IAM user, potentially changing effective access.
AWS DeleteUserPolicy
Deletes a named inline permissions policy from an IAM user.
AWS DeleteVirtualMFADevice
Deletes an unassigned virtual MFA device resource.
AWS DetachRolePolicy
Detaches a managed policy from an IAM role without deleting the policy.
AWS DetachUserPolicy
Detaches a managed policy from an IAM user without deleting the policy.
GCP EnableServiceAccount
Enables a disabled service account.
GCP generateAccessToken
Requests a short-lived OAuth access token for a service account.
GCP google.iam.admin.v1.CreateServiceAccountKey
Creates a user-managed service-account key.
GCP google.iam.admin.v1.DeleteServiceAccount
Deletes a service account, potentially disrupting dependent workloads.
GCP google.iam.admin.v1.DeleteServiceAccountKey
Deletes a service-account key.
GCP google.iam.admin.v1.SetIAMPolicy
Sets the IAM allow policy on a service account.
GCP google.iam.admin.v1.UploadServiceAccountKey
Uploads a public key certificate for a service account.
GCP iam.roles.update
Updates a custom IAM role definition.
GCP iam.serviceAccounts.actAs
Records permission to attach a service account to a resource.
GCP iam.serviceAccounts.implicitDelegation
Identifies delegated service-account token generation.
GCP iam.serviceAccounts.signJwt
Signs a JWT using a service account’s Google-managed key.
AWS PassRole
An IAM permission checked when a caller assigns a role to an AWS service; not an API event.
AWS PutGroupPolicy
Adds or replaces a named inline permissions policy on an IAM group.
AWS PutRolePermissionsBoundary
Sets or replaces the permissions boundary on an IAM role, potentially changing effective access.
AWS PutRolePolicy
Adds or replaces a named inline permissions policy on an IAM role.
AWS PutUserPermissionsBoundary
Sets or replaces the permissions boundary on an IAM user, potentially changing effective access.
AWS PutUserPolicy
Adds or replaces a named inline permissions policy on an IAM user.
AWS RemoveUserFromGroup
Removes an IAM user from a group, changing the policies that apply to the user.
AWS SetDefaultPolicyVersion
Selects an existing customer-managed IAM policy version as the operative version.
AWS UpdateAccessKey
Sets an IAM access key to Active or Inactive.
AWS UpdateAssumeRolePolicy
Replaces an IAM role trust policy, changing the conditions for assuming it.
AWS UpdateLoginProfile
Updates an IAM user console password or password-reset requirement.