- Newest
- Most votes
- Most comments
To collect a list of AWS services currently being used in your account, AWS IAM Service Access Reports provide the most comprehensive and authoritative solution. This native AWS feature delivers complete service usage data across your account by analyzing API authentication events.
Key capabilities of Service Access Reports:
- Provides last access timestamps for each AWS service
- Shows which entities accessed each service and when
- Can be generated with a single API call
- Offers cross-account visibility if you're using AWS Organizations, allowing you to see service usage across your entire organizational hierarchy
How it works: Service Access Reports answer the critical question: "For each service, view which account last accessed the service and when." The reports track actual service usage through API calls, giving you visibility into which services have been actively used rather than just which resources exist.
Implementation approach: You can automate this process by creating a solution that:
- Uses the IAM API to generate Service Access Reports
- Processes the reports to categorize services by usage patterns
- Maintains a baseline of known services to detect new service adoption over time
- Schedules regular scans (such as weekly) to monitor changes
- Sends alerts when new services are detected
This approach provides the most complete picture of service usage across your AWS environment, including visibility across multiple regions and accounts if you're using AWS Organizations. The data comes directly from AWS's authentication and authorization layer, making it the definitive source for understanding which services are actually being used in your account.
Sources
How to Detect New AWS Service Usage In Your Organization | AWS re:Post
The AWS Cost Explorer and the Cost and Usage Report are also good ways to get a list of AWS services currently being used in an account. AWS Cost Explorer and the Cost and Usage Report (CUR) are core services for managing AWS spend. Cost Explorer provides a user-friendly, visual interface for real-time, high-level analysis, while the CUR is a CSV/Parquet file delivered to S3, offering granular, line-item, and resource-level data for in-depth audits and reporting.
Relevant content
- asked 2 years ago
