Finds the IAM user that owns an AWS access key

find-access-key-by-id.sh

#!/bin/sh
# Usage: ./find-access-key-by-id.sh <ACCESS KEY ID>

# Dependencies:
# * awscli (pip install awscli)
# * jq (https://github.com/stedolan/jq)

MYSTERY_KEY=$1

users=$(aws iam list-users | jq -r .Users[].UserName)

for iamuser in $users; do
  match=$(aws iam list-access-keys --user-name $iamuser | \
    jq -r ".AccessKeyMetadata[]
           | select(.AccessKeyId == \"$MYSTERY_KEY\")
           | .UserName + \": \" + .AccessKeyId + \" (\" + .Status + \")\""
  )
  if [ ! -z "$match" ]; then
    echo "$match"
    exit 0
  fi

done

exit 1