Using search to find IAM resources
As you work through your access findings, you can use the IAM console search page as a faster option for finding IAM resources. You can search for resources using partial resource names or ARNs.
- IAM console
The IAM console search feature can locate any of the following:
-
IAM entity names that match your search keywords (for users, groups, roles, identity providers, and policies)
-
Tasks that match your search keywords
The IAM console search feature does not return information about IAM Access Analyzer.
Every line in the search result is an active link. For example, you can choose the user name in the search result, which takes you to that user's detail page. Or you can choose an action link, for example Create user, to go to the Create User page.
Note
Access key search requires you to type the full access key ID in the search box. The search result shows the user associated with that key. From there you can navigate directly to that user's page, where you can manage the access key.
Use the Search page in the IAM console to find items related to that account.
To search for items in the IAM console
-
Follow the sign-in procedure appropriate to your user type as described in the topic How to sign in to AWS in the AWS Sign-In User Guide.
-
On the Console Home page, select the IAM service.
-
In the navigation pane, choose Search.
-
In the Search box, type your search keywords.
-
Choose a link in the search results list to navigate to the corresponding part of the console.
The following icons identify the types of items that are found by a search:
Icon Description IAM users IAM groups IAM roles IAM policies Tasks such as "create user" or "attach policy" Results from the keyword delete
Sample search phrases
You can use the following phrases in the IAM search. Replace terms in italics with the names of the actual IAM users, groups, roles, access keys, policies, or identity providers that you want to locate.
-
oruser_name
orgroup_name
orrole_name
orpolicy_name
identity_provider_name
-
access_key
-
add user
oruser_name
to groupsadd users to group
group_name
-
remove user
user_name
from groups -
delete
oruser_name
delete
orgroup_name
delete
, orrole_name
delete
, orpolicy_name
delete
identity_provider_name
-
manage access keys
user_name
-
manage signing certificates
user_name
-
users
-
manage MFA for
user_name
-
manage password for
user_name
-
create role
-
password policy
-
edit trust policy for role
role_name
-
show policy document for role
role_name
-
attach policy to
role_name
-
create managed policy
-
create user
-
create group
-
attach policy to
group_name
-
attach entities to
policy_name
-
detach entities from
policy_name
-