AWS IAM Deep Analysis Skill

Safely read and audit AWS IAM — the identity and access management service for AWS.

MANDATORY: Discovery-First Pattern

Always discover the account context, IAM entities, and existing policies before analyzing permissions. Never guess ARNs or policy names.

Phase 1: Discovery

#!/bin/bash

echo "=== Account Identity ==="
aws sts get-caller-identity | jq '{
    account: .Account,
    arn: .Arn,
    user_id: .UserId
}'