Class: AWS::IAM::User

Inherits:
Resource
  • Object
show all
Defined in:
lib/aws/iam/user.rb

Overview

Represents an IAM User. Each AWS account can have many users. Users can be organized (optionally) into groups. Users (and groups) can be given policies that affect that they can do.

Creating A User

iam = AWS::IAM.new

user = iam.users.create('johndoe')

Renaming a User

You can only edit a user’s name and path (both of which will modify the user’s ARN).

user = iam.users['johndoe']
user.name = 'newname'

User Path

When you create a user you can assign a path. Paths must begin and end with a forward slash (/).

user = iam.users.create('newuser', :path => '/developers/ruby/')

Paths are a useful tool for organizing/tagging users. You can later enumerate users by their path prefixes:

iam.users.each(:path_prefix => '/developers').each do |developer|
  puts developer.name
end

Login Profile

A login profile is required for an IAM user to use the AWS Management console (web interface). See LoginProfile for more information.

Deleting Users

In order to delete a user you must first remove it from all of its groups and delete all of its signing certificates. Once this is done:

Instance Method Summary collapse

Constructor Details

#initialize(name, options = {}) ⇒ User

Returns a new instance of User.

Parameters:

  • name (String) —

    The IAM user name for this user.

  • options (Hash) (defaults to: {}) 


67
68
69
70
 
# File 'lib/aws/iam/user.rb', line 67

def initialize name, options = {}
  options[:name] = name
  super(options)
end

Instance Method Details

#access_keys ⇒ AccessKeyCollection

Returns a collection that represents the access keys for this user.

user.access_keys.each do |access_key|
  puts access_key.id
end

Returns:

  • (AccessKeyCollection) —

    Returns a collection that represents all access keys for this user.



169
170
171
 
# File 'lib/aws/iam/user.rb', line 169

def access_keys
  AccessKeyCollection.new(:user => self)
end

#delete ⇒ nil

Deletes this user.

Returns:

  • (nil) 


99
100
101
102
 
# File 'lib/aws/iam/user.rb', line 99

def delete
  client.delete_user(resource_options)
  nil
end

#delete! ⇒ Object 



104
105
106
107
108
109
110
111
112
 
# File 'lib/aws/iam/user.rb', line 104

def delete!
  groups.clear
  access_keys.clear
  policies.clear
  mfa_devices.clear
  signing_certificates.clear
  .delete if .exists?
  delete
end

#groups ⇒ UserGroupCollection

Returns a collection that includes all of the groups the user is in.

Returns:



177
178
179
 
# File 'lib/aws/iam/user.rb', line 177

def groups
  UserGroupCollection.new(self)
end

#login_profile ⇒ LoginProfile

A login profile is a user name and password that enables a user to log in to the AWS Management Console. The object returned by this method allows you to set or delete the password. For example:

user..password = "TheNewPassword"

Returns:

  • (LoginProfile) —

    Returns the login profile for this user.



157
158
159
 
# File 'lib/aws/iam/user.rb', line 157

def 
  LoginProfile.new(self)
end

#mfa_devices ⇒ MFADeviceCollection

Returns a collection that represents all MFA devices assigned to this user.

Returns:

  • (MFADeviceCollection) —

    Returns a collection that represents all MFA devices assigned to this user.



144
145
146
 
# File 'lib/aws/iam/user.rb', line 144

def mfa_devices
  MFADeviceCollection.new(self)
end

#policies ⇒ PolicyCollection

Returns a collection that represents all policies for this user.

user.policies.each do |policy|
  puts policy.name
end

Returns:

  • (PolicyCollection) —

    Returns a collection that represents all policies for this user.



122
123
124
 
# File 'lib/aws/iam/user.rb', line 122

def policies
  UserPolicyCollection.new(self)  
end

#signing_certificates ⇒ SigningCertificateCollection

Returns a collection that represents the signing certificates belonging to this user.

user.signing_certificates.each do |cert|
  # ...
end

If you need to access the signing certificates of this AWS account, see AWS::IAM#signing_certificates.

Returns:



138
139
140
 
# File 'lib/aws/iam/user.rb', line 138

def signing_certificates
  SigningCertificateCollection.new(:user => self, :config => config)
end