boto3: getting the list of access-levels in a policy

Question

is there a way in boto3 to get the access level of a service in a policy (Full access, List, Tagging, Read, Write)? The allowed actions are too much, I just need the access levels.

For example I have the "IAMUserChangePassword"-Policy. The allowed service in that policy is "IAM" and the access levels are "Read, Write". Now I want to write some python code to return a list of all access levels. I do not need the actions "iam:GetAccountPasswordPolicy, iam:ChangePassword", I just need the access levels.

Sorry, your question in unclear and lacks details. – Marcin Mar 16 '22 at 08:28 — Marcin, Mar 16 '22 at 08:28

score 0 · Accepted Answer · answered Mar 16 '22 at 10:32

No, this is not possible.

While the IAM console does provide a 'user-friendly' version of policies by showing checkboxes with Read, Write, List, etc, this level of information is not available through an API. The console must have some additional logic that parses the policies to extract this information.

boto3: getting the list of access-levels in a policy

1 Answers1