News for hackers. Stuff that matters.

A comment on Show HN: Policy_sentry, an AWS IAM Least Privilege Policy Generator. Parent comment

Re:Show HN: Policy_sentry, an AWS IAM Least Privilege Policy... by rzzzt on Tuesday October 15, 2019 @06:35PM (#21264746)
IAM also offers some built-in help for the removal part, by listing which services were accessed recently: https://aws.amazon.com/blogs/security/remove-unnecessary-per...
[ Parent | on HN ]
Re:Show HN: Policy_sentry, an AWS IAM Least Privilege Policy... by kmcquade on Tuesday October 15, 2019 @06:44PM (#21264822)
Unfortunately IAM Access Advisor only points to use of services (ex: S3-wide, EC2-wide), not use of IAM Actions. So it's useful, but it has serious limitations. I am hoping that they provide more granular results in the future.
[ Parent | on HN ]