AWS IAM
Read the identity and maximum session duration of the IAM roles your deployment references.
Establish which role is configured
Proofline reads an explicit list of IAM roles through GetRole. It retains the role ARN, stable identity, path, creation time, maximum session duration, and the provider’s last-used report when available.
These records give a review the role coordinates referenced by infrastructure such as an ECS task definition. The session-duration setting also provides context for workflows that request an AWS session.
Inspect a requested session duration
A workflow may request a role session longer than the configured maximum. The workflow declaration and role setting are separate facts a review can inspect.
This connection does not collect attached policies, trust policy documents, or permissions boundaries. It does not calculate effective permissions or establish that a session was opened.
Connect your AWS account
Choose the AWS account and region for the environment under review. Apply the connection’s scoped read-only role, verify access, and check the environment’s evidence coverage.
Get started with GitHub