find_admins can find specific privileges, but once identified, you'll want to get better insight into it. You'll want to see all of the policies applied to that principal, across their inline policies, managed policies, and those associated with groups. I should have a command to dump the IAM policies of a principal as json, with references to where these policies came from.
find_adminscan find specific privileges, but once identified, you'll want to get better insight into it. You'll want to see all of the policies applied to that principal, across their inline policies, managed policies, and those associated with groups. I should have a command to dump the IAM policies of a principal as json, with references to where these policies came from.