Get AWS Role names that use a given Identity Provider in their trust policy

get_roles_by_provider.py

import boto3

# Given list of provider ARNs
providers = []
iam_client = boto3.client('iam')
role_list = [ role['RoleName'] for role in iam_client.list_roles()['Roles'] ]
for provider in providers:
    print("{}:".format( provider ))
    for role in role_list:
        trust_policy = iam_client.get_role( RoleName=role )['Role']['AssumeRolePolicyDocument']
        try:
            if provider in trust_policy['Statement'][0]['Principal']['Federated']:
                print( role )
        except Exception:
            pass