Integration

AWS IAM integration

AWS Identity and Access Management API for managing users, groups, roles, and policies. Control access to AWS resources, manage credentials, configure MFA, and enforce permissions across your AWS account.

Connect AWS IAM How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in AWS IAM.Built from the 33 AWS IAM tools below, on the connection you add once.

Common AWS IAM use cases

automate user management
automate role management
automate group management
automate policy management
automate access key management
automate role policy management
automate user policy management
add user programmatically
get role programmatically
get user programmatically

What you can do with AWS IAM

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

User, 7 operations

add_user_to_groupAdd user to groupPOSTAdds the specified user to the specified group.
create_userCreate userPOSTCreates a new IAM user in your AWS account.
delete_userDelete userPOSTDeletes the specified IAM user. The user must not belong to any groups or have any access keys, signing certificates, MFA devices, or attached policies.
get_userGet userPOSTRetrieves information about the specified IAM user, including the user's creation date, path, unique ID, and ARN.
list_usersList usersPOSTLists the IAM users that have the specified path prefix. If no path prefix is specified, the operation returns all users in the AWS account.
remove_user_from_groupRemove user from groupPOSTRemoves the specified user from the specified group.
update_userUpdate userPOSTUpdates the name and/or the path of the specified IAM user.

Access key, 4 operations

create_access_keyCreate access keyPOSTCreates a new AWS secret access key and corresponding AWS access key ID for the specified user. A user can have at most two access keys.
delete_access_keyDelete access keyPOSTDeletes the access key pair associated with the specified IAM user.
list_access_keysList access keysPOSTReturns information about the access key IDs associated with the specified IAM user.
update_access_keyUpdate access keyPOSTChanges the status of the specified access key from Active to Inactive, or vice versa.

Group, 4 operations

create_groupCreate groupPOSTCreates a new group in your AWS account.
delete_groupDelete groupPOSTDeletes the specified IAM group. The group must not contain any users or have any attached policies.
get_groupGet groupPOSTReturns a list of IAM users that are in the specified IAM group.
list_groupsList groupsPOSTLists the IAM groups that have the specified path prefix.

Policy, 4 operations

create_policyCreate policyPOSTCreates a new managed policy for your AWS account. A managed policy is a standalone policy that you can attach to multiple users, groups, and roles.
delete_policyDelete policyPOSTDeletes the specified managed policy. Before you can delete a managed policy, you must first detach the policy from all users, groups, and roles that it is attached to.
get_policyGet policyPOSTRetrieves information about the specified managed policy, including the policy's default version and the total number of IAM users, groups, and roles to which the policy is attached.
list_policiesList policiesPOSTLists IAM managed policies that are available in your AWS account or that are attached to the specified IAM identity.

Role, 4 operations

create_roleCreate rolePOSTCreates a new role for your AWS account. For more information about roles, see IAM roles. For information about quotas for role names and the number of roles you can create, see IAM and STS quotas.
delete_roleDelete rolePOSTDeletes the specified role. The role must not have any policies attached.
get_roleGet rolePOSTRetrieves information about the specified role, including the role's path, GUID, ARN, and the role's trust policy.
list_rolesList rolesPOSTLists the IAM roles that have the specified path prefix. If no path prefix is specified, returns all roles in the AWS account.

Role policy, 2 operations

attach_role_policyAttach role policyPOSTAttaches the specified managed policy to the specified IAM role.
detach_role_policyDetach role policyPOSTRemoves the specified managed policy from the specified role.

User policy, 2 operations

attach_user_policyAttach user policyPOSTAttaches the specified managed policy to the specified user.
detach_user_policyDetach user policyPOSTRemoves the specified managed policy from the specified user.

Assume role policy, 1 operation

update_assume_role_policyUpdate assume role policyPOSTUpdates the policy that grants an IAM entity permission to assume a role. This is typically referred to as the 'role trust policy'.

Attached role policy, 1 operation

list_attached_role_policiesList attached role policiesPOSTLists all managed policies that are attached to the specified IAM role.

Attached user policy, 1 operation

list_attached_user_policiesList attached user policiesPOSTLists all managed policies that are attached to the specified IAM user.

Instance profile, 1 operation

create_instance_profileCreate instance profilePOSTCreates a new instance profile. An instance profile is a container for an IAM role that you can use to pass role information to an EC2 instance when the instance starts.

Role to instance profile, 1 operation

add_role_to_instance_profileAdd role to instance profilePOSTAdds the specified IAM role to the specified instance profile. An instance profile can contain only one role, and this quota cannot be increased.

Simulate principal policy, 1 operation

simulate_principal_policySimulate principal policyPOSTSimulates how a set of IAM policies attached to an IAM entity works with a list of API operations and AWS resources to determine the policies' effective permissions.

Use AWS IAM from Claude Code, Cursor or Codex

Connect AWS IAM in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its AWS IAM operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect AWS IAM

Create your workspace
Sign up free. Nothing to install.
Connect AWS IAM once
Add your AWS IAM connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.

AWS IAM integration FAQ

What can you do with the AWS IAM integration?

LiveContext exposes 33 operations on AWS IAM, covering user, access key, group and policy. Common uses include automate user management, automate role management and automate group management.