From the course: AWS Certified SysOps Administrator - Associate (SOA-C02) Cert Prep

Unlock this course with a free trial

Join today to access over 24,600 courses taught by industry experts.

IAM Access Analyzer

IAM Access Analyzer - Amazon Web Services (AWS) Tutorial

From the course: AWS Certified SysOps Administrator - Associate (SOA-C02) Cert Prep

Start my 1-month free trial Buy for my team

IAM Access Analyzer

“

- [Instructor] In this tutorial, we'll talk about the AWS IAM Access Analyzer. In this video, we will try to understand the problems that the IAM Access Analyzer service tries to solve and how it fits in the enterprise scenario. In order for us to understand what IAM Access Analyzer does for us, let's talk about a common scenario in an organization. Organizations usually own multiple resources on AWS, and these resources are sometimes shared with external entities outside the organization. For example, you have an S3 bucket where you allow other AWS accounts to read from the bucket. Maybe a CSOps administrator edited an S3 bucket policy that allowed external AWS accounts to write on the bucket, which then becomes a security issue. Now if you work in a larger organization, this becomes a tedious process to manage. You'll have multiple resources having different permissions configured, and there are several resources to manage,…

Contents