iam

README

aws iam plugins

aws_iam_users

configuration

• omit_user_tags (bool): when true, do not include the user's resource tags as metric tags
• omit_user_path (bool): when true, do not include the user's path as a metric tag

access control

The following IAM actions are required:

• iam:ListUsers
• iam:ListAccessKeys (resource: *)
• iam:GetAccessKeyLastUsed (resource: *)

output

Produce one datum for each IAM user found in the given session.

name: aws_iam_user tags:

• user_name: the user's name
• user_path: the user's iam resource path (unless omit_user_path is true)
• tag_{tagname}: one field for each iam resource tag on the user (unless omit_user_tags is true)

fields:

• age (duration): the length of the since the user was created
• active_key_count (count): the number of active access keys associated with the user
• oldest_key_age (duration): the length of time since the oldest access key was created
• since_last_activity (duration): the length of time since any activity by the user
• since_last_login_activity (duration): the length of time since the user last logged in with their password
• since_last_key_activity (duration): the length of time since the user last used an access key

Documentation

Index

• Constants
• type Users
  • func (plugin *Users) DefaultConfig() string
  • func (plugin *Users) Description() string
  • func (plugin *Users) Source(c context.Context, collector metric.Collector) error

Constants

const (
	UsersPluginName        = "aws_iam_users"
	UsersPluginMetricName  = "aws_iam_user"
	UsersPluginConcurrency = 2
)

Types

type Users

type Users struct {
	OmitUserTags bool `toml:"omit_user_tags"`
	OmitUserPath bool `toml:"omit_user_path"`
	// contains filtered or unexported fields
}

func (*Users) DefaultConfig

func (plugin *Users) DefaultConfig() string

func (*Users) Description

func (plugin *Users) Description() string

func (*Users) Source

func (plugin *Users) Source(c context.Context, collector metric.Collector) error