IAM Deep Dive

​

Checks Performed

• IAM Users With No Recent Activity
• Permissions That Allow Data Exfiltration
• Policies Granting Access To All Resources
• Policies That Grant Access By Exclusion (NotAction)
• Principals With Administrator Access
• Principals With Inline Policies
• Role Permissions That Allow Privilege Escalation
• Role Permissions That Can Modify Infrastructure
• Roles Assumable By Compute Services
• Roles With Broad Access To Data Services
• User Permissions That Allow Privilege Escalation
• User Permissions That Can Modify Infrastructure