IAM Access Analyzer should be enabled in all active regions
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter.
Description
Enable IAM Access Analyzer for IAM policies across all resources in each AWS region. IAM Access Analyzer provides visibility into which resources are accessible from outside your account, helping ensure that permissions adhere to the principle of least privilege. Introduced at AWS re:Invent 2019, it analyzes policies attached to resources, such as KMS keys and IAM roles, to identify unintended external access.
IAM Access Analyzer assists in identifying resources shared with external entities, allowing you to detect and mitigate unintended data access. It monitors policies for various services (including S3 buckets, IAM roles, KMS keys, AWS Lambda functions, and Amazon SQS queues) using logic-based reasoning to analyze resource-based policies.
For instructions on enabling IAM Access Analyzer, refer to Getting Started with IAM Access Analyzer.
