3 ms·
I wish AWS showed who has access to every S3 bucket created right at the S3 console. It shows permissions but doesn't show external view.
by the_arun 2y ago
I wish AWS showed who has access to every S3 bucket created right at the S3 console. It shows permissions but doesn't show external view.
- kstrauser 2y agoAccess Analyzer is the tool for that.
- alexchantavy 2y agoIt also doesn't show effective accesses from users/groups/roles/things-across-accounts; I've found that even Access Analyzer gets it very wrong sometimes. I wrote a bit on this here: https://eng.lyft.com/iam-whatever-you-say-iam-febce59d1e3b https://eng.lyft.com/iam-whatever-you-say-iam-febce59d1e3b.