Track changes in each user's IAM permissions

  • You can use Config to view the IAM policy that was assigned to an IAM user, group, or role at any time in which Config was recording.

  • This information can help you determine the permissions that belonged to a user at a specific time: for example, you can view whether the user John Doe had permission to modify VPC settings on Jan 1, 2015.

PreviousProtect a Web Tier in a Public SubnetNextSwitch from one IAM role to another

Last updated