Files
spinifex/docs/coverage/iam
Julian Sommer e2fb37c0ac docs: publish only the AWS operations Spinifex serves
The coverage pages led with a percentage and an "x of y" count, and every
table listed the modelled operations Spinifex does not implement, which reads
as a scorecard against AWS rather than a statement of what the platform serves.

A published page now opens with the operation count alone, tables the
operations the gateway serves, and carries a separate not-applicable table with
each reason inline instead of footnotes. The unimplemented operations and the
counts move to docs/coverage/internal-report.md, which no docs-site slug points
at. A service with no implemented operations has no publishable page.
2026-09-15 10:28:35 +10:00
..

title, seoTitle, description, category, sections, tags
title seoTitle description category sections tags
IAM API Coverage AWS IAM API Operation Coverage on Spinifex — Spinifex Docs The AWS IAM API operations Spinifex implements, covering users, roles, policies, groups and instance profiles, with those the platform does not offer. Coverage
overview
aws
compatibility
coverage
iam
identity
policies

IAM API Coverage

Overview

Spinifex implements 75 operations in the IAM 2010-05-08 API model.

Scope

All IAM operations are account-scoped. The root user of an account bypasses policy evaluation entirely, as it does on AWS.

Operations

Operation
AddRoleToInstanceProfile
AddUserToGroup
AttachGroupPolicy
AttachRolePolicy
AttachUserPolicy
CreateAccessKey
CreateGroup
CreateInstanceProfile
CreateOpenIDConnectProvider
CreatePolicy
CreateRole
CreateUser
DeleteAccessKey
DeleteGroup
DeleteGroupPolicy
DeleteInstanceProfile
DeleteOpenIDConnectProvider
DeletePolicy
DeleteRole
DeleteRolePolicy
DeleteUser
DeleteUserPolicy
DetachGroupPolicy
DetachRolePolicy
DetachUserPolicy
GetAccountSummary
GetGroup
GetGroupPolicy
GetInstanceProfile
GetOpenIDConnectProvider
GetPolicy
GetPolicyVersion
GetRole
GetRolePolicy
GetUser
GetUserPolicy
ListAccessKeys
ListAttachedGroupPolicies
ListAttachedRolePolicies
ListAttachedUserPolicies
ListGroupPolicies
ListGroups
ListGroupsForUser
ListInstanceProfileTags
ListInstanceProfiles
ListInstanceProfilesForRole
ListOpenIDConnectProviderTags
ListOpenIDConnectProviders
ListPolicies
ListPolicyTags
ListPolicyVersions
ListRolePolicies
ListRoleTags
ListRoles
ListUserPolicies
ListUserTags
ListUsers
PutGroupPolicy
PutRolePolicy
PutUserPolicy
RemoveRoleFromInstanceProfile
RemoveUserFromGroup
TagInstanceProfile
TagOpenIDConnectProvider
TagPolicy
TagRole
TagUser
UntagInstanceProfile
UntagOpenIDConnectProvider
UntagPolicy
UntagRole
UntagUser
UpdateAccessKey
UpdateAssumeRolePolicy
UpdateRole

Not applicable

These operations describe AWS-hosted features this platform does not offer.

Operation Reason
CreateServiceLinkedRole Service-linked roles exist for AWS service principals, which this platform has none of.
CreateServiceSpecificCredential CodeCommit credentials and SSH keys; the service does not exist here.
DeleteSSHPublicKey CodeCommit credentials and SSH keys; the service does not exist here.
DeleteServiceLinkedRole Service-linked roles exist for AWS service principals, which this platform has none of.
DeleteServiceSpecificCredential CodeCommit credentials and SSH keys; the service does not exist here.
DeleteSigningCertificate X.509 signing certificates are an EC2-Classic SOAP credential, retired by AWS.
GenerateOrganizationsAccessReport AWS Organizations is not offered, so there is no organization to report on.
GetOrganizationsAccessReport AWS Organizations is not offered, so there is no organization to report on.
GetSSHPublicKey CodeCommit credentials and SSH keys; the service does not exist here.
GetServiceLinkedRoleDeletionStatus Service-linked roles exist for AWS service principals, which this platform has none of.
ListSSHPublicKeys CodeCommit credentials and SSH keys; the service does not exist here.
ListServiceSpecificCredentials CodeCommit credentials and SSH keys; the service does not exist here.
ListSigningCertificates X.509 signing certificates are an EC2-Classic SOAP credential, retired by AWS.
ResetServiceSpecificCredential CodeCommit credentials and SSH keys; the service does not exist here.
UpdateSSHPublicKey CodeCommit credentials and SSH keys; the service does not exist here.
UpdateServiceSpecificCredential CodeCommit credentials and SSH keys; the service does not exist here.
UpdateSigningCertificate X.509 signing certificates are an EC2-Classic SOAP credential, retired by AWS.
UploadSSHPublicKey CodeCommit credentials and SSH keys; the service does not exist here.
UploadSigningCertificate X.509 signing certificates are an EC2-Classic SOAP credential, retired by AWS.