HOW TO IMPLEMENT IAM POLICY CHECKS WITH VS CODE AND IAM ACCESS ANALYZER

Summary from the TLDR InfoSec newsletter

IAM Access Analyzer custom policy checks allow for validating IAM policies against a predefined set of rules. This post walks through the steps to use IAM Access Analyzer in VS Code via the AWS Toolkit extension. IAM Access Analyzer supports ValidatePolicy, CheckNoPublicAccess, CheckAccessNotGranted, and CheckNoNewAccess checks to support developers when developing new IAM policies in Terraform or CloudFormation.