IAM roles rightsizing

0

How should one be rightsizing IAM roles? Is there a tool i could use?

已提問 2 年前檢視次數 258 次
2 個答案
0
已接受的答案

Hi, please take a look at IAM access analyser. It provides the following capabilities:

  • helps identify resources in your organization and accounts that are shared with an external entity. This lets you identify unintended access to your resources and data.
  • validates IAM policies against policy grammar and best practices.
  • generates IAM policies based on access activity in your AWS CloudTrail logs. You can use the generated policy to refine an entity's permissions by attaching it to an IAM user or role. In addition, this blog talks through a solution that provides continuous profiling of IAM usage with automated adjustments of permissions using AWS Config and CloudKnox.
AWS
Kash
已回答 2 年前
0

Hi,

if by rightsizing, you mean a way to analyze and optimize IAM policies, you can look at IAM Access Analyzer ... https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html

It generates findings based on best practices and CloudTrail logs, which lets you know if your policies are permissive, and enables you to fine-tune them.

AWS
已回答 2 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南