title: How to identify service-linked roles in AWS IAM
body: <p>In AWS there are <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html" rel="nofollow noreferrer">Service-Linked roles</a>. It looks like over time AWS may have changed their policy regarding how these are identified, and the easiest way I can tell now is by using the <code>Path</code> for each role, with the <code>/aws-service-role</code> indicator in the path.</p>
  <p>I am hoping to identify the older Service-Linked roles, but as far as I can tell, one of the only ways to do that is to looke for <code>/service-role</code> (not <code>/aws-service-role</code>) in the <code>Path</code> OR look in the policy to see if the <code>Path</code> for the policy says either <code>/service-role</code> or <code>/aws-service-role</code></p>
  <p>Is this a good way to identify older roles that are service-linked, are there any better ways?</p>
  <p>Also what is the difference between <code>/service-role</code> and <code>/aws-service-role</code> in the <code>Path</code> of either the role itself, or the policy attached to it?</p>
  <p>I can't find any documentation in AWS around what the difference between the <code>Path</code> may indicate.</p>