awsclaw-iam

Automate IAM role, policy, and credential inspection and management across AWS accounts.

1|Updated Apr 2, 2026
One-click install
npx skills add https://github.com/necatiarslan/awsclaw --skill awsclaw-iam
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: awsclaw-iam
Source: https://github.com/necatiarslan/awsclaw/tree/main/skills/awsclaw-iam
Command: npx skills add https://github.com/necatiarslan/awsclaw --skill awsclaw-iam

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Keeping track of IAM roles, policies, users, keys, and reports is tedious across AWS accounts, and manual checks can miss misconfigurations or expired credentials, so this skill centralizes permission inspection, lifecycle management, and credential auditing.

Core Features & Use Cases

  • Role & Policy Inspection: Retrieve role definitions, attached and inline policies, tags, and trust relationships to understand who can do what.
  • User & Credential Audits: List users, access keys, MFA devices, and generate credential reports to validate secure authentication settings.
  • Simulation & Lifecycle Management: Run SimulatePrincipalPolicy calls, attach or detach policies, and create or delete IAM resources while referencing service integrations for Lambda, EC2, Glue, and CloudFormation.

Quick Start

Ask the awsclaw-iam skill to list the attached policies and tags for your role and simulate its permissions to verify access boundaries.

Frequently Asked Questions about awsclaw-iam

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How does IAM policy simulation work for verifying access boundaries?

You can generate AWS credential reports to list users, access keys, and MFA devices. This validates secure authentication settings and flags expired credentials or missing MFA configurations across the account.

How do I audit IAM users and access keys for expired credentials?

User and credential audits list IAM users, access keys, and MFA devices, then generate credential reports. This process validates secure authentication settings and flags expired or misconfigured credentials across AWS accounts.

How do I simulate IAM principal policy permissions before deployment?

IAM policy simulation runs SimulatePrincipalPolicy calls to verify access boundaries before deployment. This tests permission scopes against AWS service integrations like Lambda, EC2, Glue, and CloudFormation to prevent unauthorized actions.

Does IAM credential auditing work for Lambda and EC2 service roles?

IAM credential auditing works for Lambda and EC2 service roles by inspecting attached policies and trust relationships. It references service integrations during CRUD operations and policy simulations to manage resource access boundaries.