Analyse IAM access given an S3 action group and an S3 bucket ARN

Given the IamAccessRequest containing a target S3 Bucket and S3 action groups, the endpoint will evaluate what assets have access to the target asset via IAM permissions. Specifically the evaluation will inspect ACLs, SCPs, public access block config, attached policies, inline policies, applicable group policies, applicable resource policies, trust relationships and role chains. The response contains a list of User or Role assets that can access the target based on the discovered policies, along with role chains that expose access. In order to view the specific Statements, a call to analyse-specific-access access is required.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

Request containing bucket ARN and access groups

A wrapper for a resource asset ARN and a set of grouped S3 actions to analyse

string

Resource ARN to analyse for access

actionGroups
array of strings

Array of access groups (actions) to analyse

actionGroups
Responses

Language
Credentials
Header
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json