Service-Specific Credential Metadata

Service-Specific Credential Metadata in AWS IAM provides details about credentials that are created for a specific AWS service. These credentials allow a user to authenticate directly with the service without using their standard IAM credentials. The metadata includes information such as the service name, user name, status, and creation details, helping administrators manage and track the use of these specialized credentials.

aws.iam_service_specific_credential

Fields

TitleIDTypeData TypeDescription
_keycorestring
account_idcorestring
create_datecoretimestampThe date and time, in ISO 8601 date-time format, when the service-specific credential were created.
expiration_datecoretimestampThe date and time when the service specific credential expires. This field is only present for Bedrock API keys that were created with an expiration period.
service_credential_aliascorestringFor Bedrock API keys, this is the public portion of the credential that includes the IAM user name and a suffix containing version and creation information.
service_namecorestringThe name of the service associated with the service-specific credential.
service_specific_credential_idcorestringThe unique identifier for the service-specific credential.
service_user_namecorestringThe generated user name for the service-specific credential.
statuscorestringThe status of the service-specific credential. Active means that the key is valid for API calls, while Inactive means it is not.
tagscorehstore
user_namecorestringThe name of the IAM user associated with the service-specific credential.