AWS IAM Identity and Key Metadata Discovery

Authorized, read-only discovery of AWS IAM user names, user access-key identifiers and status metadata, and IAM group names. The access-key listing API does not return secret access keys, and listing group names does not show group membership. These operations describe account discovery (MITRE ATT&CK T1087.004), not domain infrastructure compromise.