Auditing Sharing with IAM Access Analyzer

It is easy to write a policy that accidentally grants access to the public or to an external account. A single overly broad bucket policy can expose sensitive data.

IAM Access Analyzer continuously checks your resources and tells you which ones are shared outside your zone of trust, before an attacker finds them.

Access Analyzer uses automated reasoning (mathematical logic) to analyze resource policies and identify external access.

• It defines a zone of trust, usually your account or organization.
• Any grant reaching outside that zone becomes a finding.

It is proactive analysis, not log review.