AWS IAM access analyzer in 10 minutes

AWS IAM access analyzer is a vital service for Hardening your IAM roles, policies, and permissions. IAM analyzer uses the Zelkova algorithm with semantic reasoning. It automatically integrates with the AWS Security hub (when enabled).
Enjoy 10 AWS access analyzer explained in 10 minutes.
====
Connect with me: / mareksottl
Blog: www.sottlmarek...
Ultimate DevSecOps library: github.com/sot...
Twitter: / sottlmarek
Don't forget to Subscribe!

[@michalreznicky5272]

We use the IAM access analyzer pretty frequently, but it is refreshing to see other people use it as well! Well done!

[@hackitectsplayground]

I am curious, where you store the data from analyzer and how you perfom day 2 day analysis of the findings. That must be very interesting.

[@hackitectsplayground]

Do you use the AWS IAM access analyzer in your company? Let me know!

[@guilhem.castillo]

Your baby yoda is a legend!
nice video, very useful AWS service!

[@hackitectsplayground]

Thank you so much! Baby yoda is an maskot who helps me code faster and design better, he channels engineers to the force.

[@vaibhavjain1in]

Hi, how do you do complete access review in your organization?

[@hackitectsplayground]

Hello There,
I am not allowed to share details. But we use a mix of our tooling (scripting), manual reviews, and AWS services.
This depends also on the system. It can use PAM or just in just-in-time access platform etc. The majority of the companies where I worked use open-source review tooling + their tools.