Creating AWS IAM Access Analyzers In All Regions Of All Accounts (opens in new tab)

Amazon recently announced the , a useful tool to help discover if you have granted unintended access to specific types of resources in your AWS account. At the moment, an Access Analyzer needs to be created in each region of each account where you want to run it. Since this manual requirement can be a lot of work, it is a common complaint from customers. Given that Amazon listens to customer feedback and since we currently have to specify a “type” of “ACCOUNT”, I expect at some point Amazon m...