IAM list_virtual_mfa_devices doesn't actually return documented information about mfa devices

[kchoudhu]

Describe the issue

What we should be seeing:

        {
            'SerialNumber': 'string',
            'Base32StringSeed': b'bytes',
            'QRCodePNG': b'bytes',
            'User': {
                'Path': 'string',
                'UserName': 'string',
                'UserId': 'string',
                'Arn': 'string',
                'CreateDate': datetime(2015, 1, 1),
                'PasswordLastUsed': datetime(2015, 1, 1),
                'PermissionsBoundary': {
                    'PermissionsBoundaryType': 'PermissionsBoundaryPolicy',
                    'PermissionsBoundaryArn': 'string'
                },
                'Tags': [
                    {
                        'Key': 'string',
                        'Value': 'string'
                    },
                ]
            },
            'EnableDate': datetime(2015, 1, 1),
            'Tags': [
                {
                    'Key': 'string',
                    'Value': 'string'
                },
            ]
        },

What we are actually seeing:

        {
            "SerialNumber": ,
            "User": {
                "Path":,
                "UserName": ,
                "UserId": ,
                "Arn": ,
                "CreateDate": ,
                "PasswordLastUsed": 
            },
            "EnableDate": 
        },

I've got a workaround, but it would be nice if behavior and documentation matched up. Thank you!

Links

https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/iam/client/list_virtual_mfa_devices.html

[RyanFitzSimmonsAK]

Hi @kchoudhu, thanks for reaching out. This does appear to be documented on the page you linked.

IAM resource-listing operations return a subset of the available attributes for the resource. For example, this operation does not return tags, even though they are an attribute of the returned object. To view tag information for a virtual MFA device, see ListMFADeviceTags.

This is fairly common in AWS documentation; when a structure is returned, the response syntax will include every possible attribute of that structure, but some operations only return some of those attributes.

Please let me know if you have any follow-up questions.

[github-actions]

Greetings! It looks like this issue hasn’t been active in longer than five days. We encourage you to check if this is still an issue in the latest release. In the absence of more information, we will be closing this issue soon. If you find that this is still a problem, please feel free to provide a comment or upvote with a reaction on the initial post to prevent automatic closure. If the issue is already closed, please feel free to open a new one.

[github-actions]

This issue is now closed. Comments on closed issues are hard for our team to see.
If you need more assistance, please open a new issue that references this one.