Authentication
Connections
AWS
Guard Rails
Server Management
Jira
Organization Management
Reports
User Management
Sessions
Verify IAM permissions
Verify if the IAM permissions are configured properly
curl --request POST \
--url https://use.hoop.dev/api/integrations/aws/iam/verify{
"evaluation_details": [
{
"action_name": "ec2:DescribeInstances",
"decision": "allowed",
"matched_statements": [
{
"source_policy_id": "ANPAI3R4QMYGV2EXAMPL4",
"source_policy_type": "managed"
}
],
"resource_name": "arn:aws:ec2:us-west-2:123456789012:instance/i-0123456789abcdef0"
}
],
"identity": {
"account_id": "123456789012",
"arn": "arn:aws:iam::123456789012:user/johndoe",
"arn_id": "AIDACKCEVSQ6C2EXAMPLE",
"region": "us-west-2"
},
"status": "allowed"
}Response
EvaluationDetails contains the details of each permission evaluation
ActionName is the AWS service action being evaluated
"ec2:DescribeInstances"
Decision indicates whether the action is allowed or denied
allowed, explicitDeny, implicitDeny "allowed"
MatchedStatements lists the policy statements that matched during evaluation
ResourceName is the ARN of the resource being accessed
"arn:aws:ec2:us-west-2:123456789012:instance/i-0123456789abcdef0"
Identity contains information about the IAM user being evaluated
AccountID is the unique identifier for the AWS account
"123456789012"
ARN is the Amazon Resource Name that uniquely identifies the IAM user
"arn:aws:iam::123456789012:user/johndoe"
UserID is the unique identifier for the IAM user
"AIDACKCEVSQ6C2EXAMPLE"
Region is the AWS region where the IAM user is operating
"us-west-2"
Status indicates the overall result of the permission verification
"allowed"
curl --request POST \
--url https://use.hoop.dev/api/integrations/aws/iam/verify{
"evaluation_details": [
{
"action_name": "ec2:DescribeInstances",
"decision": "allowed",
"matched_statements": [
{
"source_policy_id": "ANPAI3R4QMYGV2EXAMPL4",
"source_policy_type": "managed"
}
],
"resource_name": "arn:aws:ec2:us-west-2:123456789012:instance/i-0123456789abcdef0"
}
],
"identity": {
"account_id": "123456789012",
"arn": "arn:aws:iam::123456789012:user/johndoe",
"arn_id": "AIDACKCEVSQ6C2EXAMPLE",
"region": "us-west-2"
},
"status": "allowed"
}