This Op will identify IAM Roles and users/groups with excessive IAM permissions for data access.
Identify and correct any IAM policies that allow excessive data access permissions. This assessment focuses on S3 and DynamoDB and identifies and restricts all IAM policies (managed and inline) that allow excessive permissions for tables, buckets and objects.
- Restrict Data Access
- Remove Exposed Data Actions