Account: {{t.account_name}} ({{t.account_id}})
Report generated: {{t.report_generated_time}} {{t.graph}} {% if t.users|length > 0 %}

Users

    {% for user in t.users %}
  • {{user.name}}: {{user.services_used}}/{{user.services_granted}}
    {% endfor %}
{% endif %} {% if t.roles|length > 0 %}

Roles

    {% for role in t.roles %}
  • {{role.name}}: {{role.services_used}}/{{role.services_granted}}
    {% endfor %}
{% endif %} {% if t.inactive_principals|length > 0 %}

Inactive principals

{% endif %}

In-depth analysis

{% for principal in t.principals %}

{{principal.icon}}{{principal.name}}

ServiceDays since last usePrivilege Source {% for service in principal.services %}
{{service.name}}{{service.last_use}}{{service.source}} {% endfor %}
{% if principal.groups|length > 0 %} Groups: {% endif %} {% if principal.managed_policies|length > 0 %}

Managed policies

    {% for policy in principal.managed_policies %}
  • {{policy.name}} {% endfor %}
{% endif %} {% if principal.inline_policies|length > 0 %}

Inline policies

{% for policy in principal.inline_policies %}
{{policy.name}}
{{policy.document}}
{% endfor %} {% endif %} {% if principal.assume_role is defined %}

AssumeRolePolicyDocument

{{principal.assume_role}}
{% endif %}
{% endfor %}

Groups

{% for group in t.groups %}

{{group.name}}

{% if group.members|length > 0 %}

Members

{% else %} WARNING: No members, this group can be removed {% endif %} {% if group.managed_policies|length > 0 %}

Managed policies

{% endif %} {% if group.inline_policies|length > 0 %}

Inline policies

{% for policy in group.inline_policies %}
{{policy.name}}
{{policy.document}}
{% endfor %} {% endif %} {% if group.managed_policies|length == 0 and group.inline_policies|length == 0 %} WARNING: This policy does nothing and can be removed (assuming no boundary policies). {% endif %}
{% endfor %}

Policies

{% for policy in t.policies %}

{{policy.name}}

{{policy.managed}} {% if policy.attachments|length > 0 %}

Attachments

    {% else %} WARNING: This policy is not attached to anything and can be removed. {% endif %}

    Policy document

    {{policy.document}}
{% endfor %}