Thanks! Didn't know about Pike :) Looks interesting, though it is based on a static analysis approach which has its downsides since it might not look the same

Thanks! Didn't know about Pike :) Looks interesting, though it is based on a static analysis approach which has its downsides since it might not look the same as the actual activity. AirIAM was an inspiration for us - it is generally good to group users together and for finding unused policies. We focus on generating an exact policy per identity.