IAM Access Analyzer should be enabled in all active regions

iam
이 페이지는 아직 한국어로 제공되지 않으며 번역 작업 중입니다. 번역에 관한 질문이나 의견이 있으시면 언제든지 저희에게 연락해 주십시오.

Description

Enable IAM Access Analyzer for IAM policies across all resources in each AWS region. IAM Access Analyzer provides visibility into which resources are accessible from outside your account, helping ensure that permissions adhere to the principle of least privilege. Introduced at AWS re:Invent 2019, it analyzes policies attached to resources, such as KMS keys and IAM roles, to identify unintended external access.

IAM Access Analyzer assists in identifying resources shared with external entities, allowing you to detect and mitigate unintended data access. It monitors policies for various services (including S3 buckets, IAM roles, KMS keys, AWS Lambda functions, and Amazon SQS queues) using logic-based reasoning to analyze resource-based policies.

Remediation

For instructions on enabling IAM Access Analyzer, refer to Getting Started with IAM Access Analyzer.