amazon-iam - 有没有办法为非事件的 aws 用户设置警报

Question

有什么方法可以为处于非事件状态的 AWS 用户设置警报，例如60天？我的意思是我需要创建一个警报，如果 AWS 用户账户在一段时间内处于非事件状态，它将发送通知

Answer 1

来自 GenerateServiceLastAccessedDetails - AWS Identity and Access Management :

GenerateServiceLastAccessedDetails() Generates a report that includes details about when an IAM resource (user, group, role, or policy) was last used in an attempt to access AWS services. Recent activity usually appears within four hours.

来自 GetServiceLastAccessedDetails - AWS Identity and Access Management :

GetServiceLastAccessedDetails() Retrieves a service last accessed report that was created using the GenerateServiceLastAccessedDetails operation. You can use the JobId parameter in GetServiceLastAccessedDetails to retrieve the status of your report job. When the report is complete, you can retrieve the generated report. The report includes a list of AWS services that the resource (user, group, role, or managed policy) can access.

因此，查看这些命令(可通过 AWS CLI 或 AWS SDK 获得)并找到用户访问的所有服务的最新日期。
另见: Identify unused IAM roles and remove them confidently with the last used timestamp | AWS Security Blog