Skip to content

aws.identitystore.describe_user

Example SQL Queries

SELECT * FROM
aws.identitystore.describe_user
WHERE
"identity_store_id" = 'VALUE'
AND "user_id" = 'VALUE';

Description

Retrieves the user metadata and attributes from the UserId in an identity store.

If you have administrator access to a member account, you can use this API from the member account. Read about member accounts in the Organizations User Guide.

Table Definition

Column NameColumn Data Type
identity_store_id Required Input Column

The globally unique identifier for the identity store.

VARCHAR
user_id Required Input Column

The identifier for a user in the identity store.

VARCHAR
_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
"type" VARCHAR,
"name" VARCHAR,
"account_id" VARCHAR,
"via_profile_name" VARCHAR,
"assumed_role_arn" VARCHAR,
"organization" STRUCT(
"account_name" VARCHAR,
"id" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[],
"master_account" STRUCT(
"id" VARCHAR,
"email" VARCHAR
),
"parents" STRUCT(
"type" VARCHAR,
"id" VARCHAR,
"name" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[]
)[]
)
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

_aws_region Input Column

The AWS region to use.

VARCHAR
addresses

The physical address of the user.

STRUCT(
"street_address" VARCHAR,
"locality" VARCHAR,
"region" VARCHAR,
"postal_code" VARCHAR,
"country" VARCHAR,
"formatted" VARCHAR,
"type" VARCHAR,
"primary" BOOLEAN
)[]
Show child fields
addresses[]
Show child fields
addresses[].country

The country of the address.

addresses[].formatted

A string containing a formatted version of the address for display.

addresses[].locality

A string of the address locality.

addresses[].postal_code

The postal code of the address.

addresses[].primary

A Boolean value representing whether this is the primary address for the associated resource.

addresses[].region

The region of the address.

addresses[].street_address

The street of the address.

addresses[].type

A string representing the type of address. For example, "Home."

display_name

The display name of the user.

VARCHAR
emails

The email address of the user.

STRUCT(
"value" VARCHAR,
"type" VARCHAR,
"primary" BOOLEAN
)[]
Show child fields
emails[]
Show child fields
emails[].primary

A Boolean value representing whether this is the primary email address for the associated resource.

emails[].type

A string representing the type of address. For example, "Work."

emails[].value

A string containing an email address. For example, "johndoe@amazon.com."

external_ids

A list of ExternalId objects that contains the identifiers issued to this resource by an external identity provider.

STRUCT(
"issuer" VARCHAR,
"id" VARCHAR
)[]
Show child fields
external_ids[]
Show child fields
external_ids[].id

The identifier issued to this resource by an external identity provider.

external_ids[].issuer

The issuer for an external identifier.

locale

A string containing the geographical region or location of the user.

VARCHAR
name

The name of the user.

STRUCT(
"formatted" VARCHAR,
"family_name" VARCHAR,
"given_name" VARCHAR,
"middle_name" VARCHAR,
"honorific_prefix" VARCHAR,
"honorific_suffix" VARCHAR
)
Show child fields
name.family_name

The family name of the user.

name.formatted

A string containing a formatted version of the name for display.

name.given_name

The given name of the user.

name.honorific_prefix

The honorific prefix of the user. For example, "Dr."

name.honorific_suffix

The honorific suffix of the user. For example, "M.D."

name.middle_name

The middle name of the user.

nick_name

An alternative descriptive name for the user.

VARCHAR
phone_numbers

A list of PhoneNumber objects associated with a user.

STRUCT(
"value" VARCHAR,
"type" VARCHAR,
"primary" BOOLEAN
)[]
Show child fields
phone_numbers[]
Show child fields
phone_numbers[].primary

A Boolean value representing whether this is the primary phone number for the associated resource.

phone_numbers[].type

A string representing the type of a phone number. For example, "Mobile."

phone_numbers[].value

A string containing a phone number. For example, "8675309" or "+1 (800) 123-4567".

preferred_language

The preferred language of the user.

VARCHAR
profile_url

A URL link for the user's profile.

VARCHAR
timezone

The time zone for a user.

VARCHAR
title

A string containing the title of the user.

VARCHAR
user_name

A unique string used to identify the user. The length limit is 128 characters. This value can consist of letters, accented characters, symbols, numbers, and punctuation. This value is specified at the time the user is created and stored as an attribute of the user object in the identity store.

VARCHAR
user_type

A string indicating the type of user.

VARCHAR