Demo · Pane preview

IAM Access Analyzer Findings.

External access to account resources surfaced by IAM Access Analyzer — public S3 buckets, cross-account IAM roles, KMS keys with external trust, Secrets Manager / Lambda resource policies granting outside access. Adjacent to the Public Exposure Audit pane but uses Access Analyzer's continuous policy analysis. Single-region for v0; multi-region fan-out lands when Doc 31 §G ships.

Tag Coverage Security Posture Idle Resource Finder Free Tier Monitor Service Quota Radar Public Exposure Audit App Health Rules CW Alarms Cost Summary Incident Timeline Extended Support Engine EOL Runtime EOL IAM Access Keys Root & Credentials Key Rotation GuardDuty Config Compliance Access Analyzer Security Hub Cost by Tag Cost Forecast CFN Drift AWS Health Data Transfer RI & Savings Right-Sizing Region Footprint ASG Activity ECS Services Step Functions EKS Clusters Lambda Radar LB Health CloudFront NAT Traffic Route 53 Reachability VPC Topology Alarm Gaps CW Logs EBS Snapshots RDS Backups DynamoDB AWS Backup S3 Grid CloudTrail Search EIP & ENI AMI Inventory Secrets Global Search Incident Composer X-Ray Map

Single column

Full-width pane — typical for a security-team dashboard. Top counters by resource type, filter chips, grouped finding rows with policy excerpt in the drill-down.

Two columns

Same pane embedded twice — multi-account portfolio view.

Production AWS account.

Staging AWS account.