github.com/trussworks/find-guardduty-user (go): Easily identify IAM users that have triggered GuardDuty findings.
Keywords: aws|aws-guardduty