How Can I Automatically Delete Unused IAM Roles in AWS?

You could consider using Cloud Custodian, which is a powerful tool for managing cloud resources. It's designed for automation and can help you streamline the process of identifying and deleting unused IAM roles. It might be worth looking into!

Using Infrastructure as Code (IaC) tools like Cloud Development Kit (CDK) or Terraform (TF) is a smart way to manage your resources. If you deploy your IAM roles through these tools, you can easily delete all roles along with their resources by removing the stack. However, if you created these roles manually, you might need to write a script using the AWS SDK that loops through your IAM roles and deletes them based on their last usage time. Just something to consider!

Just keep in mind that roles don’t exactly have a straightforward ‘used’ status. It’s tricky because there's always a possibility that a script or resource you're unaware of could be using a role. You can check the last access time for roles, but you need to be cautious. If you aren't a programmer, an AI chatbot could potentially help draft a script that lists these roles for further review. But relying solely on AI for deletion could be risky. If you're comfortable with coding, tools like Boto3 can help automate the cleanup process.