问题
I am trying to fetch the list of services that is allowed by a role. I see the AWS console has the Access Advisor information which fits my needs but I see no API support. Anyone know a way to call policy summary call (or something similar) that can provide that information without having to do this manually on the client side?
回答1:
You are correct. There is no API call that provides information similar to the Access Advisor.
The closest option is the ability to fetch the IAM policy, but you would then need to interpret the policy into something human-intelligible.
来源：https://stackoverflow.com/questions/45297398/aws-iam-api-for-policy-summary-and-access-advisor-info