get-iam-user-activities.ps1

Get-IAMUsers | ForEach-Object {
    do {
        $j = Request-IAMServiceLastAccessedDetail -Arn $_.Arn
        Start-Sleep -Seconds 1
        $r = Get-IAMServiceLastAccessedDetail -JobId $j
    } until (
        $r.JobStatus.Value -eq 'COMPLETED'
    )
    $d = $r.ServicesLastAccessed | Sort-Object -Descending -Property LastAuthenticated | Select-Object -First 1
    [PSCustomObject]@{
        Arn = $_.Arn
        LastAuthenticated = if ($d.LastAuthenticated.Ticks -gt 1) { $d.LastAuthenticated }
        # LastAuthenticatedEntity = $d.LastAuthenticatedEntity
        LastAuthenticatedRegion = $d.LastAuthenticatedRegion
        ServiceName = $d.ServiceName
    }
}
# } | Format-Table | Out-String | Set-Clipboard