VIEW RULE IN DATADOG VIEW MISCONFIGURATIONS

Description

Enable IAM Access Analyzer for IAM policies across all resources in each AWS region. IAM Access Analyzer provides visibility into which resources are accessible from outside your account, helping ensure that permissions adhere to the principle of least privilege. Introduced at AWS re:Invent 2019, it analyzes policies attached to resources, such as KMS keys and IAM roles, to identify unintended external access.

IAM Access Analyzer assists in identifying resources shared with external entities, allowing you to detect and mitigate unintended data access. It monitors policies for various services (including S3 buckets, IAM roles, KMS keys, AWS Lambda functions, and Amazon SQS queues) using logic-based reasoning to analyze resource-based policies.

Remediation

For instructions on enabling IAM Access Analyzer, refer to Getting Started with IAM Access Analyzer.