orca-identity-review

What problem does it solve?

Analyzes cloud identities to identify overprivileged access, contrasting granted permissions with actual usage to reveal exposure and risk.

Core Features & Use Cases

• Effective permission vs usage analysis: compares CloudTrail-derived usage to granted policies to highlight gaps.
• Overprivilege detection: flags identities with more permissions than they need and surfaces risk.
• Lateral movement assessment: maps potential attack paths through identities and cross-account risks.
• Least-privilege recommendations: proposes precise reductions and policy changes to tighten access.

Quick Start

Provide an identity (IAM role, user, or service account) to receive a risk assessment and least-privilege recommendations.