A company needs to identify unused access that has been granted to users in its AWS accounts. Which AWS service or feature will provide this information?

The correct answer is B. AWS IAM Access Analyzer. AWS IAM Access Analyzer helps identify unused permissions and access granted to users, roles, and resources in AWS accounts. It analyzes access patterns and provides insights to help you remove unused permissions, ensuring that you follow the principle of least privilege for bett

Submitted by helene.fr· Mar 6, 2026Security and Compliance

Question

Options

AAWS CloudTrail
BAWS IAM Access Analyzer
CAWS IAM Identity Center
DAWS Trusted Advisor

How the community answered

(39 responses)

A
3% (1)
B
87% (34)
C
8% (3)
D
3% (1)

Explanation

AWS IAM Access Analyzer helps identify unused permissions and access granted to users, roles, and resources in AWS accounts. It analyzes access patterns and provides insights to help you remove unused permissions, ensuring that you follow the principle of least privilege for better

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice