access-analyzer

Trustline: Check external access on your AWS account

AWS IAM Permissions Guardrails https://aws-samples.github.io/aws-iam-permissions-guardrails/

Validate all your Customer IAM Policies against AWS Access Analyzer - Policy Validation

The CloudFormation Resource Provider Package For AWS IAM Access Analyzer

This project creates Lambda function that automatically validates policy document defined when a policy or role is created or updated.

Local-first AWS cloud security scanner for IAM, CloudTrail, GuardDuty, Access Analyzer, MITRE ATT&CK, SARIF, ASFF, OCSF, and least-privilege review.

🔍 AWS IAM Access Analyzer Solution — Automated external access detection and remediation

Replaced shared third-party access keys (2 → 0) across 4 AWS accounts: vendor role + external ID, auditor via bucket policy, S3 ownership trap fixed, RAM subnet sharing, permissions boundary for delegated admins, and IAM Access Analyzer surfacing a forgotten OIDC role. Every guardrail proven by trap drills.

IAM least-privilege & break-glass broker roles, verified with Access Analyzer + Checkov

Read-only CLI that generates explained least-privilege AWS IAM policies, validates them, audits account security and compares policies with observed access. Framework-agnostic.

Deployable AWS security and cost guardrails for personal and professional accounts: threat alerts, credential remediation, budget alerts, and stale-resource cleanup, all as code with AWS CDK.

AWS IAM access lifecycle model with least privilege tiers, permissions boundary and policy checks.

Detect risky access with IAM Access Analyzer, validate IAM policies, and export compliance evidence.