Note: How to know which policy contains a specific action?
                
                
                Warning : this loop does a lot of call to aws api, use it with caution
To know that I needed to list all policies and associated statements (for the default policy version)
```
#!/bin/bash
IFS=$'\n'
for line in $(aws iam list-policies|jq '.Policies|.[]|[ .PolicyName, .Arn, .DefaultVersionId ]| @csv' -r|sed 's/","/ /g'|sed 's/"//g'); do
    name=$(echo $line|cut -d' ' -f1);
    arn=$(echo $line|cut -d' ' -f2);
    version=$(echo $line|cut -d' ' -f3);
    echo "$name"
    aws iam get-policy-version --policy-arn $arn --version-id $version
done
```
Put this in a script, redirect output to a file and go get grep!
                
                    
                    
                        
                            
                                February 22, 2017 at 4:16:06 PM GMT+1
                                *
                            
                            - permalink
                         -
                    
                
                
                    
  
     
  
 -
                
                
https://links.infomee.fr/?bERNcg