AWS IAM Access Analyzer Adds Custom Policy Checks

Amazon Web Services (AWS) has announced the general availability of custom policy checks for its IAM Access Analyzer service. This new feature aims to help customers proactively review and identify IAM policies that are either too permissive or contain critical permissions.

The service now includes a new check, "Check No Public Access," which determines if a resource policy grants public access to a specified resource type. Additionally, the existing "Check Access Not Granted" check has been updated to identify if a given policy grants permissions to one or more customer-defined AWS resources.

IAM Access Analyzer was initially launched in 2019 to assist customers in achieving least-privilege permissions through automated analysis techniques. The new custom policy checks are designed to integrate into developer workflows, automating the detection of overly permissive policies.

Updated examples and sample repositories reflecting these enhancements are available on GitHub. AWS is implementing these updates to facilitate faster development cycles while maintaining robust security standards.