glitchwizard
glitchwizard

Reputation: 552

How to identify service-linked roles in AWS IAM

In AWS there are Service-Linked roles. It looks like over time AWS may have changed their policy regarding how these are identified, and the easiest way I can tell now is by using the Path for each role, with the /aws-service-role indicator in the path.

I am hoping to identify the older Service-Linked roles, but as far as I can tell, one of the only ways to do that is to looke for /service-role (not /aws-service-role) in the Path OR look in the policy to see if the Path for the policy says either /service-role or /aws-service-role

Is this a good way to identify older roles that are service-linked, are there any better ways?

Also what is the difference between /service-role and /aws-service-role in the Path of either the role itself, or the policy attached to it?

I can't find any documentation in AWS around what the difference between the Path may indicate.

Upvotes: 1

Views: 918

Answers (0)

Related Questions