orca-identity-review

Identify overprivileged IAM roles by comparing granted permissions against actual CloudTrail usage. This analysis highlights permission gaps, revealing which AWS identities have excessive access relative to their operational needs.

Lateral movement risk in cloud identity assessment maps potential attack paths through identities and cross-account permissions. It exposes how an attacker might traverse your AWS environment using overprivileged users or roles.

Generate least-privilege policies by analyzing CloudTrail usage patterns for your service accounts. The assessment proposes precise permission reductions and restricted policy changes to tighten access and shrink risk.

Analyzing AWS users and roles relies on CloudTrail to derive actual usage patterns. Without CloudTrail data, the skill cannot effectively compare granted permissions against usage to detect overprivilege.

IAM risk assessment evaluates cross-account roles by mapping potential attack paths and lateral movement risks. It assesses these identities to surface exposure and recommend least-privilege remediation.