Access Analyzer
Prefix access-analyzer, 37 actions · Domain Security, Identity & Compliance
4 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 2 are service-linked role policies, shown with permission data only.
User access (2)
Service-linked roles (2)
Also grants Access Analyzer actions (23)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonAuroraDSQLConsoleFullAccess
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSContinuumCollectorServiceRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSResourceExplorerServiceRolePolicy
- AWSSSOMasterAccountAdministrator
- AWSSSOMemberAccountAdministrator
- AWSSSOReadOnly
- AWSSupportServiceRolePolicy
- AWSTrustedAdvisorServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SecurityAudit
- WellArchitectedAgentResourceScanning
applyarchiverule cancelpolicygeneration checkaccessnotgranted checknonewaccess checknopublicaccess createaccesspreview createanalyzer createarchiverule createservicelinkedanalyzer deleteanalyzer deletearchiverule deleteservicelinkedanalyzer generatefindingrecommendation getaccesspreview getanalyzedresource getanalyzer getarchiverule getfinding getfindingrecommendation getfindingsstatistics getgeneratedpolicy listaccesspreviewfindings listaccesspreviews listanalyzedresources listanalyzers listarchiverules listfindings listpolicygenerations listtagsforresource startpolicygeneration startresourcescan tagresource untagresource updateanalyzer updatearchiverule updatefindings validatepolicy
Actions (37)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| access-analyzer:ApplyArchiveRule | Write | 5 | 1 |
| access-analyzer:CancelPolicyGeneration | Write | 5 | 1 |
| access-analyzer:CheckAccessNotGranted | Read | 6 | 1 |
| access-analyzer:CheckNoNewAccess | Read | 6 | 1 |
| access-analyzer:CheckNoPublicAccess | Read | 9 | 1 |
| access-analyzer:CreateAccessPreview | Write | 5 | 1 |
| access-analyzer:CreateAnalyzer | Write | 5 | 1 |
| access-analyzer:CreateArchiveRule | Write | 5 | 1 |
| access-analyzer:CreateServiceLinkedAnalyzer | Write | 6 | 2 |
| access-analyzer:DeleteAnalyzer | Write | 5 | 1 |
| access-analyzer:DeleteArchiveRule | Write | 5 | 1 |
| access-analyzer:DeleteServiceLinkedAnalyzer | Write | 6 | 2 |
| access-analyzer:GenerateFindingRecommendation | Write | 5 | 2 |
| access-analyzer:GetAccessPreview | Read | 8 | 1 |
| access-analyzer:GetAnalyzedResource | Read | 9 | 1 |
| access-analyzer:GetAnalyzer | Read | 15 | 3 |
| access-analyzer:GetArchiveRule | Read | 12 | 1 |
| access-analyzer:GetFinding | Read | 9 | 1 |
| access-analyzer:GetFindingRecommendation | Read | 6 | 2 |
| access-analyzer:GetFindingsStatistics | Read | 7 | 1 |
| access-analyzer:GetGeneratedPolicy | Read | 8 | 1 |
| access-analyzer:ListAccessPreviewFindings | Read | 11 | 1 |
| access-analyzer:ListAccessPreviews | List | 11 | 1 |
| access-analyzer:ListAnalyzedResources | Read | 12 | 1 |
| access-analyzer:ListAnalyzers | List | 18 | 3 |
| access-analyzer:ListArchiveRules | List | 15 | 3 |
| access-analyzer:ListFindings | Read | 12 | 2 |
| access-analyzer:ListPolicyGenerations | Read | 11 | 1 |
| access-analyzer:ListTagsForResource | Read | 14 | 1 |
| access-analyzer:StartPolicyGeneration | Write | 5 | 1 |
| access-analyzer:StartResourceScan | Write | 5 | 1 |
| access-analyzer:TagResource | Tagging | 6 | 1 |
| access-analyzer:UntagResource | Tagging | 6 | 1 |
| access-analyzer:UpdateAnalyzer | Write | 5 | 1 |
| access-analyzer:UpdateArchiveRule | Write | 5 | 1 |
| access-analyzer:UpdateFindings | Write | 5 | 1 |
| access-analyzer:ValidatePolicy | Read | 14 | 1 |