AWS IAM Security Services
Explore AWS IAM security services including Access Analyzer to detect external resource access, credentials reports to review user MFA status, and Access Advisor to evaluate and refine user permissions. This lesson helps you understand how to audit and manage IAM security effectively to protect your AWS environment.
IAM Access Analyzer
In AWS, some services can be shared across AWS accounts or made public for everyone to use. For example, we can have an S3 bucket that’s public and can be accessed by anyone in the world via a URL. Or we can have an SQS that’s shared with a specific set of AWS accounts in our organization.
There can be a lot of reasons and use cases where a solution like this is required. But sometimes, we can forget about sharing these services, or we might accidentally allow unwanted accounts or users to access these resources, which can be a security risk.
IAM Access Analyzer is a native IAM tool that allows us to define ...