IAM Access Analyzer should be enabled in all active regions
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、
お気軽にご連絡ください。
Description
Enable IAM Access Analyzer for IAM policies across all resources in each AWS region. IAM Access Analyzer provides visibility into which resources are accessible from outside your account, helping ensure that permissions adhere to the principle of least privilege. Introduced at AWS re:Invent 2019, it analyzes policies attached to resources, such as KMS keys and IAM roles, to identify unintended external access.
IAM Access Analyzer assists in identifying resources shared with external entities, allowing you to detect and mitigate unintended data access. It monitors policies for various services (including S3 buckets, IAM roles, KMS keys, AWS Lambda functions, and Amazon SQS queues) using logic-based reasoning to analyze resource-based policies.
For instructions on enabling IAM Access Analyzer, refer to Getting Started with IAM Access Analyzer.
