AWS Data Processing
Data processing and transformation services.
10K+pulls32 ToolsPackaged byDocker, with additional security features including SBOMs, provenance, signing, and multi-arch support
Tools
| Name | Description |
|---|---|
get_policies_for_role | Get all policies attached to an IAM role. This tool retrieves all policies associated with an IAM role, providing a comprehensive view of the role's permissions and trust relationships. It helps you understand the current permissions, identify missing or excessive permissions, troubleshoot data processing issues, and verify trust relationships for service roles. ## Requirements - The role must exist in your AWS account - Valid AWS credentials with permissions to read IAM role information ## Response Information The response includes role ARN, assume role policy document (trust relationships), role description, managed policies with their documents, and inline policies with their documents. ## Usage Tips - Use this tool before adding new permissions to understand existing access - Check the assume role policy to verify which services or roles can assume this role - Look for overly permissive policies that might pose security risks - Use with add_inline_policy to implement least-privilege permissions - For Glue jobs, ensure the role has access to required data sources and targets - For EMR clusters, verify EC2 instance profile permissions - For Athena queries, check S3 bucket access permissions |