Dump the details of an AWS role

get_aws_role_details.py

#!/usr/bin/env python3
# -*- coding: utf-8 -*-
"""get role details."""
import argparse
import json

import boto3


def json_normalize(obj):
    """Return JSON dump with non-json objects represented as strings."""
    try:
        json.dumps(obj)
        return obj
    except Exception:  # pylint: disable=broad-except
        return str(obj)


def get_role_details(_args):
    """Get role details."""
    if _args.profile:
        session = boto3.Session(profile_name=_args.profile)
    else:
        session = boto3.Session()
    client = session.client("iam")
    pager = client.get_paginator("get_account_authorization_details")
    for page in pager.paginate():
        for i in page["RoleDetailList"]:
            if i["RoleName"] == _args.rolename:  # type: ignore
                return i
    return None


def main():
    """Run main function."""

    parser = argparse.ArgumentParser(
        formatter_class=argparse.RawDescriptionHelpFormatter,
        description=__doc__,
    )
    parser.add_argument(
        "rolename",
        type=str,
    )
    parser.add_argument(
        "--profile",
        type=str,
        default=None,
    )
    args = parser.parse_args()
    sub = get_role_details(args)
    print(
        json.dumps(
            sub,
            indent=4,
            separators=(",", " : "),
            default=json_normalize,
        )
    )


if __name__ == "__main__":
    main()