thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Advanced

IAM Access Analyzer

AWS feature that identifies resources shared externally, unused access and policy issues using automated reasoning.

Definition

IAM Access Analyzer analyzes resource-based policies to report resources accessible from outside a zone of trust (account or organization), finds unused roles, keys and permissions, validates policies against best practices and can generate least-privilege policies from CloudTrail activity.

Example

Access Analyzer reports that a KMS key policy grants decrypt permission to an unknown external account.

Exam tip

Use Access Analyzer to find unintended external access and to right-size permissions toward least privilege.

Related terms