A security architect needs to identify Amazon S3 buckets and IAM roles that are shared with principals outside the organization's zone of trust. Which IAM Access Analyzer capability should be used?

Question

Accepted Answer

C. External access analyzer. IAM Access Analyzer external access analyzers identify resources such as S3 buckets and IAM roles that are shared with an external entity and generate findings for that access. Unused access analyzers help identify unused permissions, which is a different analysis goal.

A security architect needs to identify Amazon S3 buckets and IAM roles that are shared with principals outside the organization's zone of trust. Which IAM Access Analyzer capability should be used?

Related Questions

Discussion