awsflow-iam

Audit IAM roles, policies, users, and groups using IAMTool commands to simulate permissions and generate account summaries.

3|1|Updated Dec 22, 2025
One-click install
npx skills add https://github.com/necatiarslan/awsflow --skill awsflow-iam
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: awsflow-iam
Source: https://github.com/necatiarslan/awsflow/tree/main/skills/awsflow-iam
Command: npx skills add https://github.com/necatiarslan/awsflow --skill awsflow-iam

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps teams quickly audit IAM configurations to understand who has access, where permissions may be overly broad, and how to improve security and compliance.

Core Features & Use Cases

  • Inspect IAM roles, policies, users, groups, access keys, MFA devices, and credential reports
  • Simulate permissions to verify access paths and detect permission gaps
  • Generate account summaries and audit findings to support security reviews

Quick Start

Describe IAM roles and simulate a user’s permissions to identify access gaps.

Frequently Asked Questions about awsflow-iam

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit IAM roles and policies in AWS for overly broad permissions?

AWS IAM auditing analyzes roles, policies, users, and groups to identify overly broad permissions and improve security. It reviews access keys, MFA devices, and credential reports to expose exactly who has access.

How do I simulate IAM permissions to verify access paths in AWS?

Simulating IAM permissions verifies access paths and detects permission gaps by evaluating policies against requested actions and resources. This confirms whether a principal can perform specific operations without actual access.

What is included in an AWS IAM account summary for security reviews?

An AWS IAM account summary generates audit findings by detailing users, roles, groups, MFA devices, and access keys. It supports security reviews by highlighting configuration gaps and credential states across the account.

Can I detect permission gaps using IAM policy simulation?

IAM policy simulation detects permission gaps by evaluating principal policies against explicit parameters. It verifies access paths to ensure users have the exact permissions required without unintended overly broad access.

Does IAM auditing work with credential reports and MFA devices?

IAM auditing works directly with credential reports and MFA devices to analyze access keys and authentication states. It evaluates these configurations to support security reviews and compliance checks across the account.