元ネタは、結構前に流れてきたこちらのツイート。
1/ Hey all! If you were watching #containersfromthecouch earlier today, I mentioned an aws cli command that you can run to get insight into what #AWS resources were accessed from a particular IAM role/user/group/policy.
— Adam Keller (@realadamjkeller) August 24, 2020
参考にしていたけどたまにしかやらずに忘れるのでメモとして残しておく。