AWS IAM

AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources. IAM lets you manage permissions that control which AWS resources users, groups, and roles can access.

With AWS IAM, you can:

• Manage users: Create and manage IAM users, assign them individual security credentials, and grant them permissions to access AWS services and resources
• Create roles: Define IAM roles with specific permissions that can be assumed by users, services, or applications for temporary access
• Attach policies: Assign managed policies to users and roles to define what actions they can perform on which resources
• Organize with groups: Create IAM groups to manage permissions for collections of users, simplifying access management at scale
• Control access keys: Generate and manage programmatic access key pairs for API and CLI access to AWS services

In Sim, the AWS IAM integration allows your workflows to automate identity management tasks such as provisioning new users, assigning roles and permissions, managing group memberships, and rotating access keys. This is particularly useful for onboarding automation, security compliance workflows, access reviews, and incident response — enabling your agents to manage AWS access control programmatically.

Usage Instructions

Integrate AWS Identity and Access Management into your workflow. Create and manage users, roles, policies, groups, and access keys.

Tools

iam_list_users

List IAM users in your AWS account

Input

Output

iam_get_user

Get detailed information about an IAM user

Input

Output

iam_create_user

Create a new IAM user

Input

Output

iam_delete_user

Delete an IAM user

Input

Output

iam_list_roles

List IAM roles in your AWS account

Input

Output

iam_get_role

Get detailed information about an IAM role

Input

Output

iam_create_role

Create a new IAM role with a trust policy

Input

Output

iam_delete_role

Delete an IAM role

Input

Output

iam_attach_user_policy

Attach a managed policy to an IAM user

Input

Output

iam_detach_user_policy

Remove a managed policy from an IAM user

Input

Output

iam_attach_role_policy

Attach a managed policy to an IAM role

Input

Output

iam_detach_role_policy

Remove a managed policy from an IAM role

Input

Output

iam_list_policies

List managed IAM policies

Input

Output

iam_create_access_key

Create a new access key pair for an IAM user

Input

Output

iam_delete_access_key

Delete an access key pair for an IAM user

Input

Output

iam_list_groups

List IAM groups in your AWS account

Input

Output

iam_add_user_to_group

Add an IAM user to a group

Input

Output

iam_remove_user_from_group

Remove an IAM user from a group

Input

Output