aws access advisor

aws-access-advisor.sh

aws iam generate-service-last-accessed-details \
--arn <arn> --granularity ACTION_LEVEL

# Get tne jobID

aws iam get-service-last-accessed-details --job-id <jobID> > output.json

parse_report.py

import json

def main():
    f = open('output.json')
    data = json.load(f)
    for x in data['ServicesLastAccessed']:
        if x['ServiceNamespace'] == 'ec2':
            for action in x['TrackedActionsLastAccessed']:
                if 'LastAccessedTime' in action:
                    print(action['ActionName'])
    f.close()

if __name__ == "__main__":
    main()