# Watch AWS IAM permission-management actions

**Use case:** 

Run a focused AWS IAM authorization example that previews service action/resource rows for cloud-security reviews.

## Input

```json
{
  "services": [
    {
      "critical": true,
      "label": "AWS Identity and Access Management",
      "service": "iam"
    },
    {
      "critical": true,
      "label": "Amazon S3",
      "service": "s3"
    },
    {
      "critical": true,
      "label": "AWS KMS",
      "service": "kms"
    },
    {
      "critical": true,
      "label": "AWS Lambda",
      "service": "lambda"
    }
  ],
  "includeAllServices": false,
  "serviceSearchTerms": [],
  "baselineRows": [],
  "maxBaselineRows": 100,
  "maxServices": 4,
  "maxActionNamesInRow": 25,
  "includeUnchangedRows": true,
  "alertOnSemanticHashChange": true,
  "alertOnNewPermissionManagementActions": true,
  "requestTimeoutSecs": 30
}
```

## Output

```json
{
  "service": {
    "label": "Service",
    "format": "string"
  },
  "label": {
    "label": "Label",
    "format": "string"
  },
  "actionCount": {
    "label": "Actions",
    "format": "integer"
  },
  "newActionCount": {
    "label": "New actions",
    "format": "integer"
  },
  "removedActionCount": {
    "label": "Removed actions",
    "format": "integer"
  },
  "permissionManagementActionCount": {
    "label": "Permission-management actions",
    "format": "integer"
  },
  "newPermissionManagementActionNames": {
    "label": "New permission-management action names",
    "format": "array"
  },
  "resourceTypeCount": {
    "label": "Resource types",
    "format": "integer"
  },
  "conditionKeyCount": {
    "label": "Condition keys",
    "format": "integer"
  },
  "changedSincePrevious": {
    "label": "Changed since previous",
    "format": "boolean"
  },
  "alert": {
    "label": "Alert",
    "format": "boolean"
  },
  "priority": {
    "label": "Priority",
    "format": "string"
  },
  "riskScore": {
    "label": "Risk score",
    "format": "integer"
  },
  "alertReasons": {
    "label": "Alert reasons",
    "format": "array"
  },
  "recommendedAction": {
    "label": "Recommended action",
    "format": "string"
  },
  "sourceUrl": {
    "label": "Source URL",
    "format": "string"
  }
}
```

## About this Actor

This example demonstrates how to use [AWS IAM Service Authorization Drift Monitor](https://apify.com/defenestrator/aws-iam-service-authorization-drift-monitor) with a specific input configuration. Visit the [Actor detail page](https://apify.com/defenestrator/aws-iam-service-authorization-drift-monitor) to learn more, explore other use cases, and run it yourself.