IAM ACCESS ANALYZER ADDS UNUSED ACCESS AND CUSTOM POLICY CHECKS

Summary from the TLDR InfoSec newsletter

AWS IAM Access Analyzer has added a new analyzer to continuously monitor roles and users for permissions that are granted and not used. The custom policy checks can be integrated with a CI/CD tool to allow for reporting on whether a change will add any additional IAM permissions.