AWS IAM Access Analyzer now offers recommendations to refine unused access

This article discusses new features in AWS IAM Access Analyzer that provide recommendations to refine and remediate unused access permissions.

Specifically, the article covers:

• IAM Access Analyzer now offers actionable recommendations to remove unused roles, access keys, passwords, and refine overly permissive policies.
• Quick links are provided in the console to delete unused roles, access keys, and passwords.
• For unused permissions, IAM Access Analyzer reviews existing policies and recommends a refined version tailored to your access activity.
• Security teams can set up automated workflows to notify developers about these recommendations and simplify the process of refining unused permissions.
• This feature is offered at no additional cost as part of AWS's Cloud Infrastructure Entitlement Management capabilities.
• Conclusion: These recommendations help guide customers towards least privilege access by identifying and remediating unused permissions.