This assumes you have already configured the aws command line tool. If not, check out my article on Getting Started with the AWS CLI.

• An IAM Policy allows certain actions (such create) on certain resources (such as EC2)
• An IAM User is typically a users account (such as john.doe) that contains an IAM Identity-Based Policy that allows certain actions (such as list) on certain resources (such S3)
• An IAM Role contains an IAM Policy that allows certain actions (such create) on certain resources (such as EC2). Let's say the Identity-Based Policy attached to john.doe does NOT allow "create S3"
  • The Role that allows "create S3" could be attached to john.doe - or, john.doe could Assume the Role:
    • Assume Role or Switch Role using Python boto3
    • Assume Role or Switch Role using Terraform
    • Assume Role or Switch Role using the AWS CLI
  • Often, a Role will have two Policies:
    • Trust Relationship
    • Permission Policy

The aws iam list-users command can be used to list the IAM users that have been created.

aws iam list-users

And here is an example of how to limit the output using the --query option.

aws iam list-users --query 'Users[?UserName==`john.doe`]'

Something like this should be returned.

{
    "Users": [
        {
            "Path": "/",
            "UserName": "john.doe",
            "UserId": "AIDAABCDL76GLUA6B21234",
            "Arn": "arn:aws:iam::123456789012:user/john.doe",
            "CreateDate": "2022-09-13T11:13:03+00:00"
        },
        {
            "Path": "/",
            "UserName": "jane.doe",
            "UserId": "ABCD1234576GPZ7MDXXYZ",
            "Arn": "arn:aws:iam::123456789012:user/jane.doe",
            "CreateDate": "2023-06-15T01:52:13+00:00",
            "PasswordLastUsed": "2023-08-04T01:28:22+00:00"
        }
    ]
}