AWS IAM

Iru connects to AWS IAM to confirm that access actually follows least privilege — not just on paper. It reads your real policy documents, roles, and access keys directly from AWS, turning a least-privilege claim into evidence you can hand an auditor.

Key Capabilities

• Verify that access to AWS resources follows least privilege
• Confirm your account password policy meets your own standard
• Catch access keys that are stale or overdue for rotation
• Track every administrative change to permissions back to the person who made it

Evidence Collected

• Users, groups, roles, and attached policy documents
• Role trust relationships and permission boundaries
• Account password policy configuration
• Access key lifecycle and last used data
• Audit trails of IAM administrative changes

Learn more