AWS IAM: Added Access Analyzer management links
Summary
Included direct links to create/manage external/internal/unused access analyzers and policy validation checks.
Security assessment
Enhances documentation for security tools that identify excessive permissions and unintended resource access.
Evidence
+For instructions on getting started, see [Create an IAM Access Analyzer external access analyzer](./access-analyzer-create-external.html). After you create an analyzer, you can [Manage an IAM Access Analyzer external access analyzer](./access-analyzer-manage-external.html).
Diff
diff --git a/IAM/latest/UserGuide/what-is-access-analyzer.md b/IAM/latest/UserGuide/what-is-access-analyzer.md index 90d356059..7e72c8991 100644 --- a//IAM/latest/UserGuide/what-is-access-analyzer.md +++ b//IAM/latest/UserGuide/what-is-access-analyzer.md @@ -35,0 +36,2 @@ An external entity can be another AWS account, a root user, an IAM user or role, +For instructions on getting started, see [Create an IAM Access Analyzer external access analyzer](./access-analyzer-create-external.html). After you create an analyzer, you can [Manage an IAM Access Analyzer external access analyzer](./access-analyzer-manage-external.html). + @@ -86,0 +89,2 @@ For your selected business-critical resources, IAM Access Analyzer helps you ide +For instructions on getting started, see [Create an IAM Access Analyzer internal access analyzer](./access-analyzer-create-internal.html). After you create an analyzer, you can [Manage an IAM Access Analyzer internal access analyzer](./access-analyzer-manage-internal.html). + @@ -122,0 +127,2 @@ IAM Access Analyzer helps you identify and review unused access in your AWS orga +For instructions on creating an unused access analyzer and managing its findings, see [Manage an IAM Access Analyzer unused access analyzer](./access-analyzer-manage-unused.html). + @@ -129 +135 @@ The findings for external, internal, and unused access analyzers are organized i -You can validate your policies against IAM [policy grammar](./reference_policies_grammar.html) and [AWS best practices](./best-practices.html) using the basic policy checks provided by IAM Access Analyzer policy validation. You can create or edit a policy using the AWS CLI, AWS API, or JSON policy editor in the IAM console. You can view policy validation check findings that include security warnings, errors, general warnings, and suggestions for your policy. These findings provide actionable recommendations that help you author policies that are functional and conform to AWS best practices. To learn more about validating policies using policy validation, see [Validate policies with IAM Access Analyzer](./access-analyzer-policy-validation.html). +You can validate your policies against IAM [policy grammar](./reference_policies_grammar.html) and [AWS best practices](./best-practices.html) using the basic policy checks provided by IAM Access Analyzer policy validation. You can create or edit a policy using the AWS CLI, AWS API, or JSON policy editor in the IAM console. You can view policy validation check findings that include security warnings, errors, general warnings, and suggestions for your policy. These findings provide actionable recommendations that help you author policies that are functional and conform to AWS best practices. To learn more about validating policies using policy validation, see [Validate policies with IAM Access Analyzer](./access-analyzer-policy-validation.html). For a list of the policy checks that IAM Access Analyzer performs, see [Checks for validating policies](./access-analyzer-checks-validating-policies.html).