+ })
+AWS IAM Users
+Gain insights into AWS IAM Users events to enhance user activity and security within your AWS environment.
+}){kind=logo}
| [AWS GovCloud](https://aws.amazon.com/govcloud-us) | Collector: [Collection from AWS GovCloud](/docs/send-data/hosted-collectors/amazon-aws/collection-aws-govcloud/) |
| }){kind=logo}
| [AWS Ground Station](https://aws.amazon.com/ground-station/) | App: [AWS Ground Station](/docs/integrations/amazon-aws/aws-ground-station/) |
| }){kind=logo}
| [AWS HealthLake](https://aws.amazon.com/healthlake/) | App: [AWS HealthLake](/docs/integrations/amazon-aws/aws-healthlake/) |
-| | [AWS Identity and Access Management](https://aws.amazon.com/iam/) | Automation Integration: [AWS IAM](/docs/platform-services/automation-service/app-central/integrations/aws-iam/) | [AWS Identity and Access Management](https://aws.amazon.com/iam/) | App: [AWS IAM Users](/docs/integrations/saas-cloud/aws-iam-users) })
| [AWS Lambda](https://aws.amazon.com/pm/lambda/) | App: [AWS Lambda](/docs/integrations/amazon-aws/lambda/) })
| [AWS Network Firewall](https://aws.amazon.com/network-firewall/) | App: [AWS Network Firewall](/docs/integrations/amazon-aws/network-firewall/) })
| [AWS Network Load Balancer](https://aws.amazon.com/elasticloadbalancing/network-load-balancer/) | App: [AWS Network Load Balancer](/docs/integrations/amazon-aws/network-load-balancer/) |
diff --git a/docs/integrations/saas-cloud/aws-iam-users.md b/docs/integrations/saas-cloud/aws-iam-users.md
new file mode 100644
index 0000000000..95af7fbad4
--- /dev/null
+++ b/docs/integrations/saas-cloud/aws-iam-users.md
@@ -0,0 +1,109 @@
+---
+id: aws-iam-users
+title: AWS IAM Users
+sidebar_label: AWS IAM Users
+description: The AWS IAM Users app for Sumo Logic helps monitor user activity and security within your AWS environment.
+---
+
+import useBaseUrl from '@docusaurus/useBaseUrl';
+
+
+
+The Sumo Logic app for AWS IAM Users provides clear insights into user activity and security within your AWS environment. Its intuitive dashboard helps you monitor and analyze user data to strengthen security and support compliance. With powerful visualizations, security teams can track user behavior, detect anomalies, and spot unauthorized access attempts. The app also helps monitor permissions, enforce best practices, and improve overall user management. Stay secure and informed with real-time monitoring and actionable insights from the AWS IAM Users app on Sumo Logic.
+
+## Log types
+
+This app uses Sumo Logic’s [AWS IAM Users Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/aws-iam-users-source/) to collect the users logs from the AWS IAM Users platform.
+
+### Sample log messages
+
+```json title="Users Log"
+{
+ "Arn": "arn:aws:iam::987883700038:user/alice",
+ "CreateDate": "2024-03-20T07:57:17Z",
+ "Path": "/",
+ "UserId": "AIDA522VHNHFBP4UFAXLG",
+ "UserName": "alice",
+ "PasswordLastUsed": "2025-08-11T04:48:52Z",
+ "PermissionsBoundary": null,
+ "Tags": null
+}
+```
+
+### Sample queries
+
+```sql title="Total Users"
+_sourceCategory="Labs/AWSIAMUsers"
+| json "UserId", "UserName", "CreateDate", "PasswordLastUsed", "PermissionsBoundary", "Arn" as user_id, user_name, create_date, password_last_used, permission_boundry, arn nodrop
+
+// global filters
+| where user_name matches "{{user_name}}"
+
+// panel specific
+| count by user_id
+| count
+```
+
+```sql title="Never Logged Users"
+_sourceCategory="Labs/AWSIAMUsers"
+| json "UserId", "UserName", "CreateDate", "PasswordLastUsed", "PermissionsBoundary", "Arn" as user_id, user_name, create_date, password_last_used, permission_boundry, arn nodrop
+
+// global filters
+| where user_name matches "{{user_name}}"
+
+// panel specific
+| where isNull(password_last_used)
+| count by create_date, user_id, user_name
+| fields - _count
+| sort by create_date asc
+```
+
+## Collection configuration and app installation
+
+import CollectionConfiguration from '../../reuse/apps/collection-configuration.md';
+
+
+
+## Upgrading the AWS IAM Users app (Optional)
+
+import AppUpdate from '../../reuse/apps/app-update.md';
+
+Gain insights into Automox events and audit data to enhance security monitoring, streamline endpoint management, and boost operational resilience.
+Gain insights into AWS IAM Users events to enhance user activity and security within your AWS environment.
+})