List Access Keys for all IAM users

list-all-access-keys.sh

for user in $(aws iam list-users --output text --no-cli-pager | awk '{print $NF}'); do
    aws iam list-access-keys --user $user --output text --no-cli-pager
    test $? -gt 128 && exit
done

oneliner

for user in $(aws iam list-users --output text --no-cli-pager| awk '{print $NF}'); do aws iam list-access-keys --user $user --output json --no-cli-pager; done | jq

Very handy, thank you!

You can add --no-cli-pager to the end if you want to get all the output inline.

I want to copy all the keys to a JSON file, how could I achieve this here?

FYI if you have access, the same information (and more) is accessible in IAM Console -> Credential Report.

@jars I've got full admin roles and I don't get the actual key IDs in the resulting CSV. I get all the active / last used sort of stuff, but not the IDs.

You're right @ceejayoz , thanks for pointing that out. At the most, the credential report can offer some access key metadata. Folks might be able to use this to reduce calls to the aws iam list-access-keys endpoint.

I modified your command a bit to run in cloudshell in case it helps anyone.

for user in $(aws iam list-users --output text | awk '{print $NF}'); do aws iam list-access-keys --user $user --output text; done

Thank you all. I didn't realize until now that this little thing was getting this visibility.
Some good suggestions up there that I took up in the updated version.

Also added a one-liner and JSON version more suitable to pipe into jq