How to Improve Your Security Posture in Just a Few Clicks with AWS IAM Access Analyzer

1

AWS Organizations

If you are working in a multi-account setup which should be the case if you run more than one workload in more than one SDLC stage, it is a best practice to use AWS Organizations to govern and manage your AWS accounts. Going further into the best practices, it is a a recommendation to have a separate Security or Audit AWS Account to manage your security services on the organizational scale. In that case, you need to first log in to your Administrative account and navigate to AWS IAM Access Analyzer in the web UI and select Analyzer Settings under the Access Analyzer section.

#Data Integration #Stream Processing #Web Service Automation 27 social mentions

2

Amazon SSO

After observing the findings in an environment using AWS IAM Identity Center (formerly AWS SSO) to manage identities and access, we can see that we have a lot of findings related to the IAM Identity Center roles and the SAML provider which the IAM IC creates in each account. The Access analyzer considers these SAML providers external to the Organization because theoretically you could federate with Identity Providers outside of your Organization or AWS.

#Developer Tools #Tech #Design Tools 24 social mentions