list-iam-policies task

[janearc]

list-iam-group-policies probably needs to be renamed list-iam-policies and have a mandatory --group or --user flag. this makes the startup logic considerably more icky

[janearc]

it looks like the stub is there but it does nothing useful other than poop iam data to stdout

[janearc]

A task to display policy data per-user from iam so that permissions can be verified quickly. In the future this would not just list the policy document JSON but rather would say "the policy template ec2-create-instances is attached to the JaneArc user" and similar per the list of policy templates we have.

arguments

• arn or username

produces

• list of policies attached to a given user

syntax

• sendak list-iam-policies --arn arn:aws:iam::145555225555:user/JaneRoe
• sendak list-iam-policies --user-name janeroe