mirror of https://github.com/mulgadc/spinifex.git synced 2026-10-15 17:11:30 +00:00

Files

T

Julian Sommer c24636c734 docs: put the not-applicable operations back in the one table

Splitting them into a second table repeated a reason on every row that shared
it and separated an operation from the rest of the surface it belongs to. One
table carries every operation the platform answers, served or refused, and the
reasons return to numbered footnotes below it.

2026-09-15 10:53:37 +10:00

intro.md

fix: simplify mulga-docs build step by collapsing coverage paths + hardware

2026-09-14 12:41:02 +10:00

README.md

docs: put the not-applicable operations back in the one table

2026-09-15 10:53:37 +10:00

README.md

title, seoTitle, description, category, sections, tags

title

seoTitle

description

IAM API Coverage

Overview

Spinifex implements 75 operations in the IAM 2010-05-08 API model.

Scope

All IAM operations are account-scoped. The root user of an account bypasses policy evaluation entirely, as it does on AWS.

Operations

Operation	Status
`AddRoleToInstanceProfile`	✅ Implemented
`AddUserToGroup`	✅ Implemented
`AttachGroupPolicy`	✅ Implemented
`AttachRolePolicy`	✅ Implemented
`AttachUserPolicy`	✅ Implemented
`CreateAccessKey`	✅ Implemented
`CreateGroup`	✅ Implemented
`CreateInstanceProfile`	✅ Implemented
`CreateOpenIDConnectProvider`	✅ Implemented
`CreatePolicy`	✅ Implemented
`CreateRole`	✅ Implemented
`CreateServiceLinkedRole`	⛔ Not applicable 3
`CreateServiceSpecificCredential`	⛔ Not applicable 1
`CreateUser`	✅ Implemented
`DeleteAccessKey`	✅ Implemented
`DeleteGroup`	✅ Implemented
`DeleteGroupPolicy`	✅ Implemented
`DeleteInstanceProfile`	✅ Implemented
`DeleteOpenIDConnectProvider`	✅ Implemented
`DeletePolicy`	✅ Implemented
`DeleteRole`	✅ Implemented
`DeleteRolePolicy`	✅ Implemented
`DeleteSSHPublicKey`	⛔ Not applicable 1
`DeleteServiceLinkedRole`	⛔ Not applicable 3
`DeleteServiceSpecificCredential`	⛔ Not applicable 1
`DeleteSigningCertificate`	⛔ Not applicable 4
`DeleteUser`	✅ Implemented
`DeleteUserPolicy`	✅ Implemented
`DetachGroupPolicy`	✅ Implemented
`DetachRolePolicy`	✅ Implemented
`DetachUserPolicy`	✅ Implemented
`GenerateOrganizationsAccessReport`	⛔ Not applicable 2
`GetAccountSummary`	✅ Implemented
`GetGroup`	✅ Implemented
`GetGroupPolicy`	✅ Implemented
`GetInstanceProfile`	✅ Implemented
`GetOpenIDConnectProvider`	✅ Implemented
`GetOrganizationsAccessReport`	⛔ Not applicable 2
`GetPolicy`	✅ Implemented
`GetPolicyVersion`	✅ Implemented
`GetRole`	✅ Implemented
`GetRolePolicy`	✅ Implemented
`GetSSHPublicKey`	⛔ Not applicable 1
`GetServiceLinkedRoleDeletionStatus`	⛔ Not applicable 3
`GetUser`	✅ Implemented
`GetUserPolicy`	✅ Implemented
`ListAccessKeys`	✅ Implemented
`ListAttachedGroupPolicies`	✅ Implemented
`ListAttachedRolePolicies`	✅ Implemented
`ListAttachedUserPolicies`	✅ Implemented
`ListGroupPolicies`	✅ Implemented
`ListGroups`	✅ Implemented
`ListGroupsForUser`	✅ Implemented
`ListInstanceProfileTags`	✅ Implemented
`ListInstanceProfiles`	✅ Implemented
`ListInstanceProfilesForRole`	✅ Implemented
`ListOpenIDConnectProviderTags`	✅ Implemented
`ListOpenIDConnectProviders`	✅ Implemented
`ListPolicies`	✅ Implemented
`ListPolicyTags`	✅ Implemented
`ListPolicyVersions`	✅ Implemented
`ListRolePolicies`	✅ Implemented
`ListRoleTags`	✅ Implemented
`ListRoles`	✅ Implemented
`ListSSHPublicKeys`	⛔ Not applicable 1
`ListServiceSpecificCredentials`	⛔ Not applicable 1
`ListSigningCertificates`	⛔ Not applicable 4
`ListUserPolicies`	✅ Implemented
`ListUserTags`	✅ Implemented
`ListUsers`	✅ Implemented
`PutGroupPolicy`	✅ Implemented
`PutRolePolicy`	✅ Implemented
`PutUserPolicy`	✅ Implemented
`RemoveRoleFromInstanceProfile`	✅ Implemented
`RemoveUserFromGroup`	✅ Implemented
`ResetServiceSpecificCredential`	⛔ Not applicable 1
`TagInstanceProfile`	✅ Implemented
`TagOpenIDConnectProvider`	✅ Implemented
`TagPolicy`	✅ Implemented
`TagRole`	✅ Implemented
`TagUser`	✅ Implemented
`UntagInstanceProfile`	✅ Implemented
`UntagOpenIDConnectProvider`	✅ Implemented
`UntagPolicy`	✅ Implemented
`UntagRole`	✅ Implemented
`UntagUser`	✅ Implemented
`UpdateAccessKey`	✅ Implemented
`UpdateAssumeRolePolicy`	✅ Implemented
`UpdateRole`	✅ Implemented
`UpdateSSHPublicKey`	⛔ Not applicable 1
`UpdateServiceSpecificCredential`	⛔ Not applicable 1
`UpdateSigningCertificate`	⛔ Not applicable 4
`UploadSSHPublicKey`	⛔ Not applicable 1
`UploadSigningCertificate`	⛔ Not applicable 4

Notes

CodeCommit credentials and SSH keys; the service does not exist here.
AWS Organizations is not offered, so there is no organization to report on.
Service-linked roles exist for AWS service principals, which this platform has none of.
X.509 signing certificates are an EC2-Classic SOAP credential, retired by AWS.