AWS Security Hub now uncovers identity risks from unused access

AWS Security Hub Updates

AWS Security Hub now integrates identity risk management into its unified console, allowing central security teams to manage threats, exposures, and posture findings alongside identity risks. This update detects unused IAM permissions, roles, and credentials across your AWS organization, helping to identify and reduce identity risk at scale.

When you enable Security Hub for your organization, a service-linked IAM Access Analyzer is automatically created in each member account. Security Hub evaluates IAM principals against 90 days of actual access activity, detects unused access, and correlates identity findings with exposure context. It also provides on-demand generation of recommended least-privilege policies based on actual usage patterns.

What to do

• Enable Security Hub for your organization to automatically create service-linked IAM Access Analyzers.
• Review unused access findings in the Security Hub console.
• Generate recommended least-privilege policies to refine IAM permissions.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.