Delete AWS IAM User with MFA

rm-iam-user.sh

#!/bin/bash

if [ -n $1 ]; then
    echo "Usage: $0 <username>"
fi

user=$1
# First, find which groups the user is in and remove them from there
for group in $(aws iam list-groups-for-user --user-name $user --query Groups[].GroupName --output text); do
    aws iam remove-user-from-group --user-name $user --group-name $group
done
# Now delete all their access keys
for accesskey in $(aws iam list-access-keys --user-name $user --query AccessKeyMetadata[].AccessKeyId --output text); do
    aws iam delete-access-key --access-key-id $accesskey --user-name $user
done
# And now their MFA devices
for mfaserial in $(aws iam list-mfa-devices --user-name $user --query MFADevices[].SerialNumber --output text); do
    aws iam deactivate-mfa-device --serial-number $mfaserial --user-name $user
    aws iam delete-virtual-mfa-device --serial-number $mfaserial
done