Amazon IAM Access Analyzer website screenshot

Amazon IAM Access Analyzer

AWS IAM Access Analyzer helps you set, verify, and refine your IAM policies by providing a suite of capabilities including findings for external, internal, and unused access, basic and custom policy checks for validating policies, and policy generation to generate fine-grained policies. It uses automated reasoning to identify resources shared with external entities and helps implement least privilege access across your AWS environment.

Amazon IAM Access Analyzer publishes 10 APIs on the APIs.io network, including Access Preview#analyzerArn API, Access Preview API, Analyzed Resource#analyzerArn&resourceArn API, and 7 more. Tagged areas include Access Control, Compliance, IAM, Policy Management, and Security.

The Amazon IAM Access Analyzer catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

Amazon IAM Access Analyzer’s developer surface includes authentication, developer portal, documentation, support, engineering blog, developer console, signup flow, and 15 more developer resources.

🌐 Visit website 📡 Source on GitHub
66.5/100 exemplar ▬ flat Agent 49/100 agent native Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessFreemiumSelf serve⚡ Free to try
10 APIs 7 Features 5 Use Cases
Access ControlComplianceIAMPolicy ManagementSecurity

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 66.5/100 · exemplar
Contract Quality 18.6 / 25
Developer Ergonomics 9.1 / 20
Commercial Clarity 16.3 / 20
Operational Transparency 6.8 / 13
Governance 8.3 / 12
Discoverability 7.4 / 10
Agent readiness — 49/100 · agent native
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 9 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 7 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/amazon-iam-access-analyzer: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 10

Individual APIs this provider publishes, each with its own machine-readable definition.

Amazon IAM Access Analyzer Access Preview#analyzerArn API

The Access Preview#analyzerArn API from Amazon IAM Access Analyzer — 1 operation(s) for access preview#analyzerarn.

Amazon IAM Access Analyzer Access Preview API

The Access Preview API from Amazon IAM Access Analyzer — 3 operation(s) for access preview.

Amazon IAM Access Analyzer Analyzed Resource#analyzerArn&resourceArn API

The Analyzed Resource#analyzerArn&resourceArn API from Amazon IAM Access Analyzer — 1 operation(s) for analyzed resource#analyzerarn&resourcearn.

Amazon IAM Access Analyzer Analyzed Resource API

The Analyzed Resource API from Amazon IAM Access Analyzer — 1 operation(s) for analyzed resource.

Amazon IAM Access Analyzer Analyzer API

The Analyzer API from Amazon IAM Access Analyzer — 4 operation(s) for analyzer.

Amazon IAM Access Analyzer Archive Rule API

The Archive Rule API from Amazon IAM Access Analyzer — 1 operation(s) for archive rule.

Amazon IAM Access Analyzer Finding API

The Finding API from Amazon IAM Access Analyzer — 2 operation(s) for finding.

Amazon IAM Access Analyzer Policy API

The Policy API from Amazon IAM Access Analyzer — 3 operation(s) for policy.

Amazon IAM Access Analyzer Resource API

The Resource API from Amazon IAM Access Analyzer — 1 operation(s) for resource.

Amazon IAM Access Analyzer Tags API

The Tags API from Amazon IAM Access Analyzer — 2 operation(s) for tags.

Scroll for all 10

Postman Collections 10

Ready-to-run Postman collections for exercising this provider's APIs.

Access Analyzer Access Preview#analyzerArn API

POSTMAN

Access Analyzer #analyzerArn Access Preview API

POSTMAN

Access Analyzer Access Preview#analyzerArn Analyzed Resource#analyzerArn&resourceArn API

POSTMAN

Access Analyzer Access Preview#analyzerArn Analyzed Resource API

POSTMAN

Access Access Preview#analyzerArn Analyzer API

POSTMAN

Access Analyzer Access Preview#analyzerArn Archive Rule API

POSTMAN

Access Analyzer Access Preview#analyzerArn Finding API

POSTMAN

Access Analyzer Access Preview#analyzerArn Policy API

POSTMAN

Access Analyzer Access Preview#analyzerArn Resource API

POSTMAN

Access Analyzer Access Preview#analyzerArn Tags API

POSTMAN

Scroll for all 10

Pricing Plans 1

Published pricing tiers and plan structures.

Amazon Iam Access Analyzer Plans Pricing

3 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Amazon Iam Access Analyzer Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Amazon Iam Access Analyzer Finops

FINOPS

Features 7

Notable capabilities this provider offers.

External Access Analysis

Identifies resources shared with external entities outside your AWS organization using automated reasoning.

Internal Access Analysis

Identifies which principals within your organization have access to selected resources.

Unused Access Analysis

Identifies unused IAM roles, access keys, console passwords, and unused service permissions.

Policy Validation

Validates IAM policies against best practices and custom security standards before deployment.

Policy Generation

Generates fine-grained IAM policies based on actual access activity logged in AWS CloudTrail.

Access Preview

Preview public and cross-account access to resources before deploying permission changes.

Archive Rules

Automatically archive findings that match specified criteria to reduce noise.

Scroll for all 7

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Amazon Iam Access Analyzer Context

116 classes · 146 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

Amazon IAM Access Analyzer API Rules

5 rules · 3 warnings 2 info

SPECTRAL

Amazon IAM Access Analyzer API Rules

29 rules · 10 errors 15 warnings 4 info

SPECTRAL

JSON Schema 162

Standalone JSON Schema definitions for this provider's data models.

AccessPreviewFinding

15 properties

JSON SCHEMA

AccessPreviewFindingsList

0 properties

JSON SCHEMA

AccessPreview

6 properties

JSON SCHEMA

AccessPreviewStatusReasonCode

0 properties

JSON SCHEMA

AccessPreviewStatusReason

1 properties

JSON SCHEMA

AccessPreviewStatus

0 properties

JSON SCHEMA

AccessPreviewSummary

5 properties

JSON SCHEMA

AccessPreviewsList

0 properties

JSON SCHEMA

AclGrantee

2 properties

JSON SCHEMA

AclPermission

0 properties

JSON SCHEMA

ActionList

0 properties

JSON SCHEMA

AnalyzedResource

11 properties

JSON SCHEMA

AnalyzedResourceSummary

3 properties

JSON SCHEMA

AnalyzedResourcesList

0 properties

JSON SCHEMA

AnalyzerStatus

0 properties

JSON SCHEMA

AnalyzerSummary

9 properties

JSON SCHEMA

AnalyzersList

0 properties

JSON SCHEMA

ApplyArchiveRuleRequest

3 properties

JSON SCHEMA

ArchiveRuleSummary

4 properties

JSON SCHEMA

ArchiveRulesList

0 properties

JSON SCHEMA

CancelPolicyGenerationRequest

0 properties

JSON SCHEMA

CancelPolicyGenerationResponse

0 properties

JSON SCHEMA

CloudTrailDetails

4 properties

JSON SCHEMA

CloudTrailProperties

3 properties

JSON SCHEMA

ConditionKeyMap

0 properties

JSON SCHEMA

Configuration

11 properties

JSON SCHEMA

ConfigurationsMap

0 properties

JSON SCHEMA

CreateAccessPreviewRequest

3 properties

JSON SCHEMA

CreateAccessPreviewResponse

1 properties

JSON SCHEMA

CreateAnalyzerRequest

5 properties

JSON SCHEMA

CreateAnalyzerResponse

1 properties

JSON SCHEMA

CreateArchiveRuleRequest

3 properties

JSON SCHEMA

Criterion

4 properties

JSON SCHEMA

DeleteAnalyzerRequest

0 properties

JSON SCHEMA

DeleteArchiveRuleRequest

0 properties

JSON SCHEMA

EbsGroupList

0 properties

JSON SCHEMA

EbsSnapshotConfiguration

3 properties

JSON SCHEMA

EbsUserIdList

0 properties

JSON SCHEMA

EcrRepositoryConfiguration

1 properties

JSON SCHEMA

EfsFileSystemConfiguration

1 properties

JSON SCHEMA

FilterCriteriaMap

0 properties

JSON SCHEMA

FindingChangeType

0 properties

JSON SCHEMA

FindingIdList

0 properties

JSON SCHEMA

Finding

14 properties

JSON SCHEMA

FindingSourceDetail

2 properties

JSON SCHEMA

FindingSourceList

0 properties

JSON SCHEMA

FindingSource

2 properties

JSON SCHEMA

FindingSourceType

0 properties

JSON SCHEMA

FindingStatus

0 properties

JSON SCHEMA

FindingStatusUpdate

0 properties

JSON SCHEMA

FindingSummary

14 properties

JSON SCHEMA

FindingsList

0 properties

JSON SCHEMA

GeneratedPolicyList

0 properties

JSON SCHEMA

GeneratedPolicyProperties

3 properties

JSON SCHEMA

GeneratedPolicyResult

2 properties

JSON SCHEMA

GeneratedPolicy

1 properties

JSON SCHEMA

GetAccessPreviewRequest

0 properties

JSON SCHEMA

GetAccessPreviewResponse

1 properties

JSON SCHEMA

GetAnalyzedResourceRequest

0 properties

JSON SCHEMA

GetAnalyzedResourceResponse

1 properties

JSON SCHEMA

GetAnalyzerRequest

0 properties

JSON SCHEMA

GetAnalyzerResponse

1 properties

JSON SCHEMA

GetArchiveRuleRequest

0 properties

JSON SCHEMA

GetArchiveRuleResponse

1 properties

JSON SCHEMA

GetFindingRequest

0 properties

JSON SCHEMA

GetFindingResponse

1 properties

JSON SCHEMA

GetGeneratedPolicyRequest

0 properties

JSON SCHEMA

GetGeneratedPolicyResponse

2 properties

JSON SCHEMA

IamRoleConfiguration

1 properties

JSON SCHEMA

InlineArchiveRule

2 properties

JSON SCHEMA

InlineArchiveRulesList

0 properties

JSON SCHEMA

InternetConfiguration

0 properties

JSON SCHEMA

JobDetails

5 properties

JSON SCHEMA

JobErrorCode

0 properties

JSON SCHEMA

JobError

2 properties

JSON SCHEMA

JobStatus

0 properties

JSON SCHEMA

KmsConstraintsMap

0 properties

JSON SCHEMA

KmsGrantConfiguration

5 properties

JSON SCHEMA

KmsGrantConfigurationsList

0 properties

JSON SCHEMA

KmsGrantConstraints

2 properties

JSON SCHEMA

KmsGrantOperation

0 properties

JSON SCHEMA

KmsGrantOperationsList

0 properties

JSON SCHEMA

KmsKeyConfiguration

2 properties

JSON SCHEMA

KmsKeyPoliciesMap

0 properties

JSON SCHEMA

ListAccessPreviewFindingsRequest

4 properties

JSON SCHEMA

ListAccessPreviewFindingsResponse

2 properties

JSON SCHEMA

ListAccessPreviewsRequest

0 properties

JSON SCHEMA

ListAccessPreviewsResponse

2 properties

JSON SCHEMA

ListAnalyzedResourcesRequest

4 properties

JSON SCHEMA

ListAnalyzedResourcesResponse

2 properties

JSON SCHEMA

ListAnalyzersRequest

0 properties

JSON SCHEMA

ListAnalyzersResponse

2 properties

JSON SCHEMA

ListArchiveRulesRequest

0 properties

JSON SCHEMA

ListArchiveRulesResponse

2 properties

JSON SCHEMA

ListFindingsRequest

5 properties

JSON SCHEMA

ListFindingsResponse

2 properties

JSON SCHEMA

ListPolicyGenerationsRequest

0 properties

JSON SCHEMA

ListPolicyGenerationsResponse

2 properties

JSON SCHEMA

ListTagsForResourceRequest

0 properties

JSON SCHEMA

ListTagsForResourceResponse

1 properties

JSON SCHEMA

Locale

0 properties

JSON SCHEMA

LocationList

0 properties

JSON SCHEMA

Location

2 properties

JSON SCHEMA

NetworkOriginConfiguration

2 properties

JSON SCHEMA

OrderBy

0 properties

JSON SCHEMA

PathElementList

0 properties

JSON SCHEMA

PathElement

4 properties

JSON SCHEMA

PolicyGenerationDetails

1 properties

JSON SCHEMA

PolicyGenerationList

0 properties

JSON SCHEMA

PolicyGeneration

5 properties

JSON SCHEMA

PolicyType

0 properties

JSON SCHEMA

Position

3 properties

JSON SCHEMA

PrincipalMap

0 properties

JSON SCHEMA

RdsDbClusterSnapshotAccountIdsList

0 properties

JSON SCHEMA

RdsDbClusterSnapshotAttributeValue

1 properties

JSON SCHEMA

RdsDbClusterSnapshotAttributesMap

0 properties

JSON SCHEMA

RdsDbClusterSnapshotConfiguration

2 properties

JSON SCHEMA

RdsDbSnapshotAccountIdsList

0 properties

JSON SCHEMA

RdsDbSnapshotAttributeValue

1 properties

JSON SCHEMA

RdsDbSnapshotAttributesMap

0 properties

JSON SCHEMA

RdsDbSnapshotConfiguration

2 properties

JSON SCHEMA

ReasonCode

0 properties

JSON SCHEMA

RegionList

0 properties

JSON SCHEMA

ResourceType

0 properties

JSON SCHEMA

S3AccessPointConfiguration

3 properties

JSON SCHEMA

S3AccessPointConfigurationsMap

0 properties

JSON SCHEMA

S3BucketAclGrantConfiguration

2 properties

JSON SCHEMA

S3BucketAclGrantConfigurationsList

0 properties

JSON SCHEMA

S3BucketConfiguration

4 properties

JSON SCHEMA

S3PublicAccessBlockConfiguration

2 properties

JSON SCHEMA

SecretsManagerSecretConfiguration

2 properties

JSON SCHEMA

SharedViaList

0 properties

JSON SCHEMA

SnsTopicConfiguration

1 properties

JSON SCHEMA

SortCriteria

2 properties

JSON SCHEMA

Span

2 properties

JSON SCHEMA

SqsQueueConfiguration

1 properties

JSON SCHEMA

StartPolicyGenerationRequest

3 properties

JSON SCHEMA

StartPolicyGenerationResponse

1 properties

JSON SCHEMA

StartResourceScanRequest

3 properties

JSON SCHEMA

StatusReason

1 properties

JSON SCHEMA

Substring

2 properties

JSON SCHEMA

TagKeys

0 properties

JSON SCHEMA

TagResourceRequest

1 properties

JSON SCHEMA

TagResourceResponse

0 properties

JSON SCHEMA

TagsMap

0 properties

JSON SCHEMA

TrailList

0 properties

JSON SCHEMA

TrailPropertiesList

0 properties

JSON SCHEMA

TrailProperties

3 properties

JSON SCHEMA

Trail

3 properties

JSON SCHEMA

Type

0 properties

JSON SCHEMA

UntagResourceRequest

0 properties

JSON SCHEMA

UntagResourceResponse

0 properties

JSON SCHEMA

UpdateArchiveRuleRequest

2 properties

JSON SCHEMA

UpdateFindingsRequest

5 properties

JSON SCHEMA

ValidatePolicyFindingList

0 properties

JSON SCHEMA

ValidatePolicyFinding

5 properties

JSON SCHEMA

ValidatePolicyFindingType

0 properties

JSON SCHEMA

ValidatePolicyRequest

4 properties

JSON SCHEMA

ValidatePolicyResourceType

0 properties

JSON SCHEMA

ValidatePolicyResponse

2 properties

JSON SCHEMA

ValueList

0 properties

JSON SCHEMA

VpcConfiguration

1 properties

JSON SCHEMA

Scroll for all 162

JSON Structure 162

JSON Structure definitions describing this provider's data shapes.

Iam Access Analyzer Access Preview Finding Structure

15 properties

JSON STRUCTURE

Iam Access Analyzer Access Preview Findings List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Access Preview Status Reason Code Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Access Preview Status Reason Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Access Preview Status Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Access Preview Structure

6 properties

JSON STRUCTURE

Iam Access Analyzer Access Preview Summary Structure

5 properties

JSON STRUCTURE

Iam Access Analyzer Access Previews List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Acl Grantee Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Acl Permission Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Action List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Analyzed Resource Structure

11 properties

JSON STRUCTURE

Iam Access Analyzer Analyzed Resource Summary Structure

3 properties

JSON STRUCTURE

Iam Access Analyzer Analyzed Resources List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Analyzer Status Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Analyzer Summary Structure

9 properties

JSON STRUCTURE

Iam Access Analyzer Analyzers List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Apply Archive Rule Request Structure

3 properties

JSON STRUCTURE

Iam Access Analyzer Archive Rule Summary Structure

4 properties

JSON STRUCTURE

Iam Access Analyzer Archive Rules List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Cancel Policy Generation Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Cancel Policy Generation Response Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Cloud Trail Details Structure

4 properties

JSON STRUCTURE

Iam Access Analyzer Cloud Trail Properties Structure

3 properties

JSON STRUCTURE

Iam Access Analyzer Condition Key Map Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Configuration Structure

11 properties

JSON STRUCTURE

Iam Access Analyzer Configurations Map Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Create Access Preview Request Structure

3 properties

JSON STRUCTURE

Iam Access Analyzer Create Access Preview Response Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Create Analyzer Request Structure

5 properties

JSON STRUCTURE

Iam Access Analyzer Create Analyzer Response Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Create Archive Rule Request Structure

3 properties

JSON STRUCTURE

Iam Access Analyzer Criterion Structure

4 properties

JSON STRUCTURE

Iam Access Analyzer Delete Analyzer Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Delete Archive Rule Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Ebs Group List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Ebs Snapshot Configuration Structure

3 properties

JSON STRUCTURE

Iam Access Analyzer Ebs User Id List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Ecr Repository Configuration Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Efs File System Configuration Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Filter Criteria Map Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Finding Change Type Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Finding Id List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Finding Source Detail Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Finding Source List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Finding Source Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Finding Source Type Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Finding Status Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Finding Status Update Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Finding Structure

14 properties

JSON STRUCTURE

Iam Access Analyzer Finding Summary Structure

14 properties

JSON STRUCTURE

Iam Access Analyzer Findings List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Generated Policy List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Generated Policy Properties Structure

3 properties

JSON STRUCTURE

Iam Access Analyzer Generated Policy Result Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Generated Policy Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Get Access Preview Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Get Access Preview Response Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Get Analyzed Resource Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Get Analyzed Resource Response Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Get Analyzer Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Get Analyzer Response Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Get Archive Rule Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Get Archive Rule Response Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Get Finding Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Get Finding Response Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Get Generated Policy Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Get Generated Policy Response Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Iam Role Configuration Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Inline Archive Rule Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Inline Archive Rules List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Internet Configuration Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Job Details Structure

5 properties

JSON STRUCTURE

Iam Access Analyzer Job Error Code Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Job Error Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Job Status Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Kms Constraints Map Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Kms Grant Configuration Structure

5 properties

JSON STRUCTURE

Iam Access Analyzer Kms Grant Configurations List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Kms Grant Constraints Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Kms Grant Operation Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Kms Grant Operations List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Kms Key Configuration Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Kms Key Policies Map Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer List Access Preview Findings Request Structure

4 properties

JSON STRUCTURE

Iam Access Analyzer List Access Preview Findings Response Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer List Access Previews Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer List Access Previews Response Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer List Analyzed Resources Request Structure

4 properties

JSON STRUCTURE

Iam Access Analyzer List Analyzed Resources Response Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer List Analyzers Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer List Analyzers Response Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer List Archive Rules Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer List Archive Rules Response Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer List Findings Request Structure

5 properties

JSON STRUCTURE

Iam Access Analyzer List Findings Response Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer List Policy Generations Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer List Policy Generations Response Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer List Tags For Resource Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer List Tags For Resource Response Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Locale Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Location List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Location Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Network Origin Configuration Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Order By Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Path Element List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Path Element Structure

4 properties

JSON STRUCTURE

Iam Access Analyzer Policy Generation Details Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Policy Generation List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Policy Generation Structure

5 properties

JSON STRUCTURE

Iam Access Analyzer Policy Type Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Position Structure

3 properties

JSON STRUCTURE

Iam Access Analyzer Principal Map Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Rds Db Cluster Snapshot Account Ids List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Rds Db Cluster Snapshot Attribute Value Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Rds Db Cluster Snapshot Attributes Map Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Rds Db Cluster Snapshot Configuration Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Rds Db Snapshot Account Ids List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Rds Db Snapshot Attribute Value Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Rds Db Snapshot Attributes Map Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Rds Db Snapshot Configuration Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Reason Code Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Region List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Resource Type Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer S3 Access Point Configuration Structure

3 properties

JSON STRUCTURE

Iam Access Analyzer S3 Access Point Configurations Map Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer S3 Bucket Acl Grant Configuration Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer S3 Bucket Acl Grant Configurations List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer S3 Bucket Configuration Structure

4 properties

JSON STRUCTURE

Iam Access Analyzer S3 Public Access Block Configuration Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Secrets Manager Secret Configuration Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Shared Via List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Sns Topic Configuration Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Sort Criteria Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Span Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Sqs Queue Configuration Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Start Policy Generation Request Structure

3 properties

JSON STRUCTURE

Iam Access Analyzer Start Policy Generation Response Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Start Resource Scan Request Structure

3 properties

JSON STRUCTURE

Iam Access Analyzer Status Reason Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Substring Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Tag Keys Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Tag Resource Request Structure

1 properties

JSON STRUCTURE

Iam Access Analyzer Tag Resource Response Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Tags Map Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Trail List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Trail Properties List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Trail Properties Structure

3 properties

JSON STRUCTURE

Iam Access Analyzer Trail Structure

3 properties

JSON STRUCTURE

Iam Access Analyzer Type Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Untag Resource Request Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Untag Resource Response Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Update Archive Rule Request Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Update Findings Request Structure

5 properties

JSON STRUCTURE

Iam Access Analyzer Validate Policy Finding List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Validate Policy Finding Structure

5 properties

JSON STRUCTURE

Iam Access Analyzer Validate Policy Finding Type Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Validate Policy Request Structure

4 properties

JSON STRUCTURE

Iam Access Analyzer Validate Policy Resource Type Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Validate Policy Response Structure

2 properties

JSON STRUCTURE

Iam Access Analyzer Value List Structure

0 properties

JSON STRUCTURE

Iam Access Analyzer Vpc Configuration Structure

1 properties

JSON STRUCTURE

Scroll for all 162

Examples 115

Example request and response payloads for these APIs.

Iam Access Analyzer Access Preview Example

6 fields

EXAMPLE

Iam Access Analyzer Access Preview Finding Example

15 fields

EXAMPLE

Iam Access Analyzer Access Preview Status Reason Example

1 fields

EXAMPLE

Iam Access Analyzer Access Preview Summary Example

5 fields

EXAMPLE

Iam Access Analyzer Acl Grantee Example

2 fields

EXAMPLE

Iam Access Analyzer Analyzed Resource Example

11 fields

EXAMPLE

Iam Access Analyzer Analyzed Resource Summary Example

3 fields

EXAMPLE

Iam Access Analyzer Analyzer Summary Example

9 fields

EXAMPLE

Iam Access Analyzer Apply Archive Rule Request Example

3 fields

EXAMPLE

Iam Access Analyzer Archive Rule Summary Example

4 fields

EXAMPLE

Iam Access Analyzer Cancel Policy Generation Request Example

0 fields

EXAMPLE

Iam Access Analyzer Cancel Policy Generation Response Example

0 fields

EXAMPLE

Iam Access Analyzer Cloud Trail Details Example

4 fields

EXAMPLE

Iam Access Analyzer Cloud Trail Properties Example

3 fields

EXAMPLE

Iam Access Analyzer Condition Key Map Example

0 fields

EXAMPLE

Iam Access Analyzer Configuration Example

11 fields

EXAMPLE

Iam Access Analyzer Configurations Map Example

0 fields

EXAMPLE

Iam Access Analyzer Create Access Preview Request Example

3 fields

EXAMPLE

Iam Access Analyzer Create Access Preview Response Example

1 fields

EXAMPLE

Iam Access Analyzer Create Analyzer Request Example

5 fields

EXAMPLE

Iam Access Analyzer Create Analyzer Response Example

1 fields

EXAMPLE

Iam Access Analyzer Create Archive Rule Request Example

3 fields

EXAMPLE

Iam Access Analyzer Criterion Example

4 fields

EXAMPLE

Iam Access Analyzer Delete Analyzer Request Example

0 fields

EXAMPLE

Iam Access Analyzer Delete Archive Rule Request Example

0 fields

EXAMPLE

Iam Access Analyzer Ebs Snapshot Configuration Example

3 fields

EXAMPLE

Iam Access Analyzer Ecr Repository Configuration Example

1 fields

EXAMPLE

Iam Access Analyzer Efs File System Configuration Example

1 fields

EXAMPLE

Iam Access Analyzer Filter Criteria Map Example

0 fields

EXAMPLE

Iam Access Analyzer Finding Example

14 fields

EXAMPLE

Iam Access Analyzer Finding Source Detail Example

2 fields

EXAMPLE

Iam Access Analyzer Finding Source Example

2 fields

EXAMPLE

Iam Access Analyzer Finding Summary Example

14 fields

EXAMPLE

Iam Access Analyzer Generated Policy Example

1 fields

EXAMPLE

Iam Access Analyzer Generated Policy Properties Example

3 fields

EXAMPLE

Iam Access Analyzer Generated Policy Result Example

2 fields

EXAMPLE

Iam Access Analyzer Get Access Preview Request Example

0 fields

EXAMPLE

Iam Access Analyzer Get Access Preview Response Example

1 fields

EXAMPLE

Iam Access Analyzer Get Analyzed Resource Request Example

0 fields

EXAMPLE

Iam Access Analyzer Get Analyzed Resource Response Example

1 fields

EXAMPLE

Iam Access Analyzer Get Analyzer Request Example

0 fields

EXAMPLE

Iam Access Analyzer Get Analyzer Response Example

1 fields

EXAMPLE

Iam Access Analyzer Get Archive Rule Request Example

0 fields

EXAMPLE

Iam Access Analyzer Get Archive Rule Response Example

1 fields

EXAMPLE

Iam Access Analyzer Get Finding Request Example

0 fields

EXAMPLE

Iam Access Analyzer Get Finding Response Example

1 fields

EXAMPLE

Iam Access Analyzer Get Generated Policy Request Example

0 fields

EXAMPLE

Iam Access Analyzer Get Generated Policy Response Example

2 fields

EXAMPLE

Iam Access Analyzer Iam Role Configuration Example

1 fields

EXAMPLE

Iam Access Analyzer Inline Archive Rule Example

2 fields

EXAMPLE

Iam Access Analyzer Internet Configuration Example

0 fields

EXAMPLE

Iam Access Analyzer Job Details Example

5 fields

EXAMPLE

Iam Access Analyzer Job Error Example

2 fields

EXAMPLE

Iam Access Analyzer Kms Constraints Map Example

0 fields

EXAMPLE

Iam Access Analyzer Kms Grant Configuration Example

5 fields

EXAMPLE

Iam Access Analyzer Kms Grant Constraints Example

2 fields

EXAMPLE

Iam Access Analyzer Kms Key Configuration Example

2 fields

EXAMPLE

Iam Access Analyzer Kms Key Policies Map Example

0 fields

EXAMPLE

Iam Access Analyzer List Access Preview Findings Request Example

4 fields

EXAMPLE

Iam Access Analyzer List Access Preview Findings Response Example

2 fields

EXAMPLE

Iam Access Analyzer List Access Previews Request Example

0 fields

EXAMPLE

Iam Access Analyzer List Access Previews Response Example

2 fields

EXAMPLE

Iam Access Analyzer List Analyzed Resources Request Example

4 fields

EXAMPLE

Iam Access Analyzer List Analyzed Resources Response Example

2 fields

EXAMPLE

Iam Access Analyzer List Analyzers Request Example

0 fields

EXAMPLE

Iam Access Analyzer List Analyzers Response Example

2 fields

EXAMPLE

Iam Access Analyzer List Archive Rules Request Example

0 fields

EXAMPLE

Iam Access Analyzer List Archive Rules Response Example

2 fields

EXAMPLE

Iam Access Analyzer List Findings Request Example

5 fields

EXAMPLE

Iam Access Analyzer List Findings Response Example

2 fields

EXAMPLE

Iam Access Analyzer List Policy Generations Request Example

0 fields

EXAMPLE

Iam Access Analyzer List Policy Generations Response Example

2 fields

EXAMPLE

Iam Access Analyzer List Tags For Resource Request Example

0 fields

EXAMPLE

Iam Access Analyzer List Tags For Resource Response Example

1 fields

EXAMPLE

Iam Access Analyzer Location Example

2 fields

EXAMPLE

Iam Access Analyzer Network Origin Configuration Example

2 fields

EXAMPLE

Iam Access Analyzer Path Element Example

4 fields

EXAMPLE

Iam Access Analyzer Policy Generation Details Example

1 fields

EXAMPLE

Iam Access Analyzer Policy Generation Example

5 fields

EXAMPLE

Iam Access Analyzer Position Example

3 fields

EXAMPLE

Iam Access Analyzer Principal Map Example

0 fields

EXAMPLE

Iam Access Analyzer Rds Db Cluster Snapshot Attribute Value Example

1 fields

EXAMPLE

Iam Access Analyzer Rds Db Cluster Snapshot Attributes Map Example

0 fields

EXAMPLE

Iam Access Analyzer Rds Db Cluster Snapshot Configuration Example

2 fields

EXAMPLE

Iam Access Analyzer Rds Db Snapshot Attribute Value Example

1 fields

EXAMPLE

Iam Access Analyzer Rds Db Snapshot Attributes Map Example

0 fields

EXAMPLE

Iam Access Analyzer Rds Db Snapshot Configuration Example

2 fields

EXAMPLE

Iam Access Analyzer S3 Access Point Configuration Example

3 fields

EXAMPLE

Iam Access Analyzer S3 Access Point Configurations Map Example

0 fields

EXAMPLE

Iam Access Analyzer S3 Bucket Acl Grant Configuration Example

2 fields

EXAMPLE

Iam Access Analyzer S3 Bucket Configuration Example

4 fields

EXAMPLE

Iam Access Analyzer S3 Public Access Block Configuration Example

2 fields

EXAMPLE

Iam Access Analyzer Secrets Manager Secret Configuration Example

2 fields

EXAMPLE

Iam Access Analyzer Sns Topic Configuration Example

1 fields

EXAMPLE

Iam Access Analyzer Sort Criteria Example

2 fields

EXAMPLE

Iam Access Analyzer Span Example

2 fields

EXAMPLE

Iam Access Analyzer Sqs Queue Configuration Example

1 fields

EXAMPLE

Iam Access Analyzer Start Policy Generation Request Example

3 fields

EXAMPLE

Iam Access Analyzer Start Policy Generation Response Example

1 fields

EXAMPLE

Iam Access Analyzer Start Resource Scan Request Example

3 fields

EXAMPLE

Iam Access Analyzer Status Reason Example

1 fields

EXAMPLE

Iam Access Analyzer Substring Example

2 fields

EXAMPLE

Iam Access Analyzer Tag Resource Request Example

1 fields

EXAMPLE

Iam Access Analyzer Tag Resource Response Example

0 fields

EXAMPLE

Iam Access Analyzer Tags Map Example

0 fields

EXAMPLE

Iam Access Analyzer Trail Example

3 fields

EXAMPLE

Iam Access Analyzer Trail Properties Example

3 fields

EXAMPLE

Iam Access Analyzer Untag Resource Request Example

0 fields

EXAMPLE

Iam Access Analyzer Untag Resource Response Example

0 fields

EXAMPLE

Iam Access Analyzer Update Archive Rule Request Example

2 fields

EXAMPLE

Iam Access Analyzer Update Findings Request Example

5 fields

EXAMPLE

Iam Access Analyzer Validate Policy Finding Example

5 fields

EXAMPLE

Iam Access Analyzer Validate Policy Request Example

4 fields

EXAMPLE

Iam Access Analyzer Validate Policy Response Example

2 fields

EXAMPLE

Iam Access Analyzer Vpc Configuration Example

1 fields

EXAMPLE

Scroll for all 115

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Amazon Iam Access Analyzer Authentication

apiKey · 1 scheme

SECURITY

Amazon Iam Access Analyzer Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Amazon Iam Access Analyzer Vulnerability Disclosure

security.txt · contact published

SECURITY

Amazon Iam Access Analyzer Trust Center

PCI DSS, HIPAA, FedRAMP, GDPR, FIPS 140

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Amazon Iam Access Analyzer Agentic Access

28 operations · 17 acting

28 operations · 17 acting

AGENTIC

Use Cases 5

What developers build with this provider.

Least Privilege Enforcement

Analyze actual API activity to generate minimal permission policies that implement least privilege access.

Security Compliance Auditing

Continuously monitor for unintended external access to sensitive resources like S3 buckets and IAM roles.

CI/CD Policy Validation

Integrate policy checks into deployment pipelines to catch overpermissive policies before they reach production.

Access Governance

Identify and remediate unused access across IAM users, roles, and service accounts organization-wide.

Cross-Account Access Review

Identify all resources shared across AWS accounts and validate the intent of each cross-account permission.

Resources

Get Started 4

Portal, sign-up, and the first successful call

Portal
Portal
 Console
Console
 Signup
Signup
 Login
Login

Documentation 1

Reference material describing how the API behaves

Documentation
Documentation

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess

Design & Contract 3

Pagination, idempotency, versioning, errors, and events

SpectralRules
SpectralRules
 Vocabulary
Vocabulary
 JSONLD
JSONLD

Build 2

SDKs, sample code, and the tooling you integrate with

PostmanWorkspace
PostmanWorkspace
 GitHubOrganization
GitHubOrganization

Access & Security 4

Authentication, authorization, and security posture

TrustCenter
TrustCenter
 VulnerabilityDisclosure
VulnerabilityDisclosure
 DomainSecurity
DomainSecurity
 Authentication
Authentication

Operate 3

Status, limits, changes, and where to get help

Support
Support
 StatusPage
StatusPage
 Contact
Contact

Commercial 2

Pricing, plans, and the legal terms of use

TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Source (apis.yml)

apis.yml Raw ↑ 
aid: amazon-iam-access-analyzer
name: Amazon IAM Access Analyzer
description: AWS IAM Access Analyzer helps you set, verify, and refine your IAM policies by providing a suite of capabilities
  including findings for external, internal, and unused access, basic and custom policy checks for validating policies, and
  policy generation to generate fine-grained policies. It uses automated reasoning to identify resources shared with external
  entities and helps implement least privilege access across your AWS environment.
type: Index
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/amazon-iam-access-analyzer.png
tags:
- Access Control
- AWS
- Compliance
- IAM
- Policy Management
- Security
url: https://raw.githubusercontent.com/api-evangelist/amazon-iam-access-analyzer/refs/heads/main/apis.yml
created: '2026-03-16'
modified: '2026-05-19'
specificationVersion: '0.19'
apis:
- aid: amazon-iam-access-analyzer:amazon-iam-access-analyzer-access-preview-analyzerarn-api
  name: Amazon IAM Access Analyzer Access Preview#analyzerArn API
  description: The Access Preview#analyzerArn API from Amazon IAM Access Analyzer — 1 operation(s) for access preview#analyzerarn.
  humanURL: https://aws.amazon.com/iam/features/analyze-access/
  baseURL: https://access-analyzer.amazonaws.com
  tags:
  - Access Preview#analyzerArn
  properties:
  - type: OpenAPI
    url: openapi/amazon-iam-access-analyzer-access-preview-analyzerarn-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/access-analyzer/latest/APIReference/Welcome.html
  - type: GettingStarted
    url: https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
  - type: Pricing
    url: https://aws.amazon.com/iam/pricing/
  - type: FAQ
    url: https://aws.amazon.com/iam/faqs/
  - type: JSONSchema
    url: json-schema/iam-access-analyzer-analyzer-schema.json
  - type: JSONStructure
    url: json-structure/iam-access-analyzer-analyzer-structure.json
  - type: Examples
    url: examples/iam-access-analyzer-analyzer-example.json
- aid: amazon-iam-access-analyzer:amazon-iam-access-analyzer-access-preview-api
  name: Amazon IAM Access Analyzer Access Preview API
  description: The Access Preview API from Amazon IAM Access Analyzer — 3 operation(s) for access preview.
  humanURL: https://aws.amazon.com/iam/features/analyze-access/
  baseURL: https://access-analyzer.amazonaws.com
  tags:
  - Access Preview
  properties:
  - type: OpenAPI
    url: openapi/amazon-iam-access-analyzer-access-preview-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/access-analyzer/latest/APIReference/Welcome.html
  - type: GettingStarted
    url: https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
  - type: Pricing
    url: https://aws.amazon.com/iam/pricing/
  - type: FAQ
    url: https://aws.amazon.com/iam/faqs/
  - type: JSONSchema
    url: json-schema/iam-access-analyzer-analyzer-schema.json
  - type: JSONStructure
    url: json-structure/iam-access-analyzer-analyzer-structure.json
  - type: Examples
    url: examples/iam-access-analyzer-analyzer-example.json
- aid: amazon-iam-access-analyzer:amazon-iam-access-analyzer-analyzed-resource-analyzerarn-resourcearn-api
  name: Amazon IAM Access Analyzer Analyzed Resource#analyzerArn&resourceArn API
  description: The Analyzed Resource#analyzerArn&resourceArn API from Amazon IAM Access Analyzer — 1 operation(s) for analyzed
    resource#analyzerarn&resourcearn.
  humanURL: https://aws.amazon.com/iam/features/analyze-access/
  baseURL: https://access-analyzer.amazonaws.com
  tags:
  - Analyzed Resource#analyzerArn&resourceArn
  properties:
  - type: OpenAPI
    url: openapi/amazon-iam-access-analyzer-analyzed-resource-analyzerarn-resourcearn-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/access-analyzer/latest/APIReference/Welcome.html
  - type: GettingStarted
    url: https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
  - type: Pricing
    url: https://aws.amazon.com/iam/pricing/
  - type: FAQ
    url: https://aws.amazon.com/iam/faqs/
  - type: JSONSchema
    url: json-schema/iam-access-analyzer-analyzer-schema.json
  - type: JSONStructure
    url: json-structure/iam-access-analyzer-analyzer-structure.json
  - type: Examples
    url: examples/iam-access-analyzer-analyzer-example.json
- aid: amazon-iam-access-analyzer:amazon-iam-access-analyzer-analyzed-resource-api
  name: Amazon IAM Access Analyzer Analyzed Resource API
  description: The Analyzed Resource API from Amazon IAM Access Analyzer — 1 operation(s) for analyzed resource.
  humanURL: https://aws.amazon.com/iam/features/analyze-access/
  baseURL: https://access-analyzer.amazonaws.com
  tags:
  - Analyzed Resource
  properties:
  - type: OpenAPI
    url: openapi/amazon-iam-access-analyzer-analyzed-resource-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/access-analyzer/latest/APIReference/Welcome.html
  - type: GettingStarted
    url: https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
  - type: Pricing
    url: https://aws.amazon.com/iam/pricing/
  - type: FAQ
    url: https://aws.amazon.com/iam/faqs/
  - type: JSONSchema
    url: json-schema/iam-access-analyzer-analyzer-schema.json
  - type: JSONStructure
    url: json-structure/iam-access-analyzer-analyzer-structure.json
  - type: Examples
    url: examples/iam-access-analyzer-analyzer-example.json
- aid: amazon-iam-access-analyzer:amazon-iam-access-analyzer-analyzer-api
  name: Amazon IAM Access Analyzer Analyzer API
  description: The Analyzer API from Amazon IAM Access Analyzer — 4 operation(s) for analyzer.
  humanURL: https://aws.amazon.com/iam/features/analyze-access/
  baseURL: https://access-analyzer.amazonaws.com
  tags:
  - Analyzer
  properties:
  - type: OpenAPI
    url: openapi/amazon-iam-access-analyzer-analyzer-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/access-analyzer/latest/APIReference/Welcome.html
  - type: GettingStarted
    url: https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
  - type: Pricing
    url: https://aws.amazon.com/iam/pricing/
  - type: FAQ
    url: https://aws.amazon.com/iam/faqs/
  - type: JSONSchema
    url: json-schema/iam-access-analyzer-analyzer-schema.json
  - type: JSONStructure
    url: json-structure/iam-access-analyzer-analyzer-structure.json
  - type: Examples
    url: examples/iam-access-analyzer-analyzer-example.json
- aid: amazon-iam-access-analyzer:amazon-iam-access-analyzer-archive-rule-api
  name: Amazon IAM Access Analyzer Archive Rule API
  description: The Archive Rule API from Amazon IAM Access Analyzer — 1 operation(s) for archive rule.
  humanURL: https://aws.amazon.com/iam/features/analyze-access/
  baseURL: https://access-analyzer.amazonaws.com
  tags:
  - Archive Rule
  properties:
  - type: OpenAPI
    url: openapi/amazon-iam-access-analyzer-archive-rule-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/access-analyzer/latest/APIReference/Welcome.html
  - type: GettingStarted
    url: https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
  - type: Pricing
    url: https://aws.amazon.com/iam/pricing/
  - type: FAQ
    url: https://aws.amazon.com/iam/faqs/
  - type: JSONSchema
    url: json-schema/iam-access-analyzer-analyzer-schema.json
  - type: JSONStructure
    url: json-structure/iam-access-analyzer-analyzer-structure.json
  - type: Examples
    url: examples/iam-access-analyzer-analyzer-example.json
- aid: amazon-iam-access-analyzer:amazon-iam-access-analyzer-finding-api
  name: Amazon IAM Access Analyzer Finding API
  description: The Finding API from Amazon IAM Access Analyzer — 2 operation(s) for finding.
  humanURL: https://aws.amazon.com/iam/features/analyze-access/
  baseURL: https://access-analyzer.amazonaws.com
  tags:
  - Finding
  properties:
  - type: OpenAPI
    url: openapi/amazon-iam-access-analyzer-finding-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/access-analyzer/latest/APIReference/Welcome.html
  - type: GettingStarted
    url: https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
  - type: Pricing
    url: https://aws.amazon.com/iam/pricing/
  - type: FAQ
    url: https://aws.amazon.com/iam/faqs/
  - type: JSONSchema
    url: json-schema/iam-access-analyzer-analyzer-schema.json
  - type: JSONStructure
    url: json-structure/iam-access-analyzer-analyzer-structure.json
  - type: Examples
    url: examples/iam-access-analyzer-analyzer-example.json
- aid: amazon-iam-access-analyzer:amazon-iam-access-analyzer-policy-api
  name: Amazon IAM Access Analyzer Policy API
  description: The Policy API from Amazon IAM Access Analyzer — 3 operation(s) for policy.
  humanURL: https://aws.amazon.com/iam/features/analyze-access/
  baseURL: https://access-analyzer.amazonaws.com
  tags:
  - Policy
  properties:
  - type: OpenAPI
    url: openapi/amazon-iam-access-analyzer-policy-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/access-analyzer/latest/APIReference/Welcome.html
  - type: GettingStarted
    url: https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
  - type: Pricing
    url: https://aws.amazon.com/iam/pricing/
  - type: FAQ
    url: https://aws.amazon.com/iam/faqs/
  - type: JSONSchema
    url: json-schema/iam-access-analyzer-analyzer-schema.json
  - type: JSONStructure
    url: json-structure/iam-access-analyzer-analyzer-structure.json
  - type: Examples
    url: examples/iam-access-analyzer-analyzer-example.json
- aid: amazon-iam-access-analyzer:amazon-iam-access-analyzer-resource-api
  name: Amazon IAM Access Analyzer Resource API
  description: The Resource API from Amazon IAM Access Analyzer — 1 operation(s) for resource.
  humanURL: https://aws.amazon.com/iam/features/analyze-access/
  baseURL: https://access-analyzer.amazonaws.com
  tags:
  - Resource
  properties:
  - type: OpenAPI
    url: openapi/amazon-iam-access-analyzer-resource-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/access-analyzer/latest/APIReference/Welcome.html
  - type: GettingStarted
    url: https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
  - type: Pricing
    url: https://aws.amazon.com/iam/pricing/
  - type: FAQ
    url: https://aws.amazon.com/iam/faqs/
  - type: JSONSchema
    url: json-schema/iam-access-analyzer-analyzer-schema.json
  - type: JSONStructure
    url: json-structure/iam-access-analyzer-analyzer-structure.json
  - type: Examples
    url: examples/iam-access-analyzer-analyzer-example.json
- aid: amazon-iam-access-analyzer:amazon-iam-access-analyzer-tags-api
  name: Amazon IAM Access Analyzer Tags API
  description: The Tags API from Amazon IAM Access Analyzer — 2 operation(s) for tags.
  humanURL: https://aws.amazon.com/iam/features/analyze-access/
  baseURL: https://access-analyzer.amazonaws.com
  tags:
  - Tags
  properties:
  - type: OpenAPI
    url: openapi/amazon-iam-access-analyzer-tags-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/access-analyzer/latest/APIReference/Welcome.html
  - type: GettingStarted
    url: https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
  - type: Pricing
    url: https://aws.amazon.com/iam/pricing/
  - type: FAQ
    url: https://aws.amazon.com/iam/faqs/
  - type: JSONSchema
    url: json-schema/iam-access-analyzer-analyzer-schema.json
  - type: JSONStructure
    url: json-structure/iam-access-analyzer-analyzer-structure.json
  - type: Examples
    url: examples/iam-access-analyzer-analyzer-example.json
common:
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/amazon-iam-access-analyzer/overview
- type: AgenticAccess
  url: agentic-access/amazon-iam-access-analyzer-agentic-access.yml
- type: TrustCenter
  url: security/amazon-iam-access-analyzer-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/amazon-iam-access-analyzer-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/amazon-iam-access-analyzer-domain-security.yml
- type: Authentication
  url: authentication/amazon-iam-access-analyzer-authentication.yml
- type: Portal
  url: https://aws.amazon.com/iam/features/analyze-access/
- type: Website
  url: https://aws.amazon.com/iam/
- type: Documentation
  url: https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
- type: TermsOfService
  url: https://aws.amazon.com/service-terms/
- type: PrivacyPolicy
  url: https://aws.amazon.com/privacy/
- type: Support
  url: https://aws.amazon.com/premiumsupport/
- type: Blog
  url: https://aws.amazon.com/blogs/security/tag/iam-access-analyzer/
- type: GitHubOrganization
  url: https://github.com/aws
- type: Console
  url: https://console.aws.amazon.com/access-analyzer/
- type: Signup
  url: https://portal.aws.amazon.com/billing/signup
- type: Login
  url: https://signin.aws.amazon.com/
- type: StatusPage
  url: https://health.aws.amazon.com/health/status
- type: Contact
  url: https://aws.amazon.com/contact-us/
- type: SpectralRules
  url: rules/amazon-iam-access-analyzer-spectral-rules.yml
- type: Vocabulary
  url: vocabulary/amazon-iam-access-analyzer-vocabulary.yaml
- type: JSONLD
  url: json-ld/amazon-iam-access-analyzer-context.jsonld
- type: Features
  data:
  - name: External Access Analysis
    description: Identifies resources shared with external entities outside your AWS organization using automated reasoning.
  - name: Internal Access Analysis
    description: Identifies which principals within your organization have access to selected resources.
  - name: Unused Access Analysis
    description: Identifies unused IAM roles, access keys, console passwords, and unused service permissions.
  - name: Policy Validation
    description: Validates IAM policies against best practices and custom security standards before deployment.
  - name: Policy Generation
    description: Generates fine-grained IAM policies based on actual access activity logged in AWS CloudTrail.
  - name: Access Preview
    description: Preview public and cross-account access to resources before deploying permission changes.
  - name: Archive Rules
    description: Automatically archive findings that match specified criteria to reduce noise.
- type: UseCases
  data:
  - name: Least Privilege Enforcement
    description: Analyze actual API activity to generate minimal permission policies that implement least privilege access.
  - name: Security Compliance Auditing
    description: Continuously monitor for unintended external access to sensitive resources like S3 buckets and IAM roles.
  - name: CI/CD Policy Validation
    description: Integrate policy checks into deployment pipelines to catch overpermissive policies before they reach production.
  - name: Access Governance
    description: Identify and remediate unused access across IAM users, roles, and service accounts organization-wide.
  - name: Cross-Account Access Review
    description: Identify all resources shared across AWS accounts and validate the intent of each cross-account permission.
- type: Integrations
  data:
  - name: AWS CloudTrail
    description: Uses CloudTrail activity logs to generate least-privilege IAM policies based on actual usage.
  - name: AWS Security Hub
    description: Publishes Access Analyzer findings to Security Hub for centralized security monitoring.
  - name: AWS Organizations
    description: Analyzes access across all accounts in an AWS Organization for comprehensive governance.
  - name: AWS Config
    description: Triggers re-scanning of resources when configuration changes are detected.
  - name: Amazon EventBridge
    description: Publishes finding events to EventBridge for automated security workflow responses.
- type: Integrations
  url: https://aws.amazon.com/marketplace
integrations:
- name: Sign in
- name: Agent Mode
- name: Why AWS Marketplace?
- name: Get started in AWS Marketplace
- name: Industry
- name: Resources
- name: Become a Channel Partner
- name: Sell in AWS Marketplace
- name: Manage Your Account
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com