4 ms·
IAM also offers some built-in help for the removal part, by listing which services were accessed recently: https://aws.amazon.com/blogs/security/remove-unnecess
by rzzzt 7y ago
IAM also offers some built-in help for the removal part, by listing which services were accessed recently: https://aws.amazon.com/blogs/security/remove-unnecessary-permissions-in-your-iam-policies-by-using-service-last-accessed-data/ https://aws.amazon.com/blogs/security/remove-unnecessary-per...
- kmcquade 7y agoUnfortunately IAM Access Advisor only points to use of services (ex: S3-wide, EC2-wide), not use of IAM Actions. So it's useful, but it has serious limitations. I am hoping that they provide more granular results in the future.