[ aws ]

accessanalyzer

Description

AWS IAM Access Analyzer helps identify potential resource-access risks by enabling you to identify any policies that grant access to an external principal. It does this by using logic-based reasoning to analyze resource-based policies in your AWS environment. An external principal can be another AWS account, a root user, an IAM user or role, a federated user, an AWS service, or an anonymous user. This guide describes the AWS IAM Access Analyzer operations that you can call programmatically. For general information about Access Analyzer, see the AWS IAM Access Analyzer section of the IAM User Guide .

To start using Access Analyzer, you first need to create an analyzer.

Available Commands

• create-analyzer
• create-archive-rule
• delete-analyzer
• delete-archive-rule
• get-analyzed-resource
• get-analyzer
• get-archive-rule
• get-finding
• list-analyzed-resources
• list-analyzers
• list-archive-rules
• list-findings
• list-tags-for-resource
• start-resource-scan
• tag-resource
• untag-resource
• update-archive-rule
• update-findings