AWS: Find IAM user creator

Question

Is it possible to find out who created an IAM user? I have a bunch of users in my organisation AWS account which I want to remove but I'd like to check with the ones that created them if they are still needed for any reason but I can't find the creator information.

Is it possible to get that detail either through console (couldn't find it) or programmatically?

Answer 1

You'll want to use CloudTrail.

Go to the service CloudTrail -> Event History -> Then change filter to Resource Type, and under resource type enter 'User'

You can do this through the console too if you want to filter or handle larger data sets. https://docs.aws.amazon.com/cli/latest/reference/cloudtrail/index.html