iam:ListRoles tells you ARNs and policy rules — at least, in their example response. https://docs.aws.amazon.com/IAM/latest/APIReference/API_ListRoles.html htt

iam:ListRoles tells you ARNs and policy rules — at least, in their example response. https://docs.aws.amazon.com/IAM/latest/APIReference/API_ListRoles.html https://docs.aws.amazon.com/IAM/latest/APIReference/API_List... I don’t think this is a major or severe issue — but it certainly would provide information for pivots, eg, ARNs to request and information about from where.