README
¶
IAM code examples for the SDK for Go V2
Overview
Shows how to use the AWS SDK for Go V2 to work with AWS Identity and Access Management (IAM).
IAM is a web service for securely controlling access to AWS services. With IAM, you can centrally manage permissions in your AWS account.
⚠ Important
- Running this code might result in charges to your AWS account. For more details, see AWS Pricing and Free Tier.
- Running the tests might result in charges to your AWS account.
- We recommend that you grant your code least privilege. At most, grant only the minimum permissions required to perform the task. For more information, see Grant least privilege.
- This code is not tested in every AWS Region. For more information, see AWS Regional Services.
Code examples
Prerequisites
For prerequisites, see the README in the gov2 folder.
Get started
- Hello IAM (
ListPolicies)
Single actions
Code excerpts that show you how to call individual service functions.
- Attach a policy to a role (
AttachRolePolicy) - Create a policy (
CreatePolicy) - Create a role (
CreateRole) - Create a service-linked role (
CreateServiceLinkedRole) - Create a user (
CreateUser) - Create an access key (
CreateAccessKey) - Create an inline policy for a user (
PutUserPolicy) - Delete a policy (
DeletePolicy) - Delete a role (
DeleteRole) - Delete a service-linked role (
DeleteServiceLinkedRole) - Delete a user (
DeleteUser) - Delete an access key (
DeleteAccessKey) - Delete an inline policy from a user (
DeleteUserPolicy) - Detach a policy from a role (
DetachRolePolicy) - Get a policy (
GetPolicy) - Get a role (
GetRole) - Get a user (
GetUser) - Get the account password policy (
GetAccountPasswordPolicy) - List SAML providers (
ListSAMLProviders) - List a user's access keys (
ListAccessKeys) - List groups (
ListGroups) - List inline policies for a role (
ListRolePolicies) - List inline policies for a user (
ListUserPolicies) - List policies (
ListPolicies) - List policies attached to a role (
ListAttachedRolePolicies) - List roles (
ListRoles) - List users (
ListUsers)
Scenarios
Code examples that show you how to accomplish a specific task by calling multiple functions within the same service.
Run the examples
Instructions
Hello IAM
This example shows you how to get started using IAM.
go run ./hello
Run a scenario
All scenarios can be run with the cmd runner. To get a list of scenarios
and to get help for running a scenario, use the following command:
go run ./cmd -h
Create a user and assume a role
This example shows you how to create a user and assume a role.
- Create a user with no permissions.
- Create a role that grants permission to list Amazon S3 buckets for the account.
- Add a policy to let the user assume the role.
- Assume the role and list S3 buckets using temporary credentials, then clean up resources.
Tests
⚠ Running tests might result in charges to your AWS account.
To find instructions for running these tests, see the README
in the gov2 folder.
Additional resources
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
SPDX-License-Identifier: Apache-2.0
Directories