Given the IamAccessRequest containing a target S3 Bucket and S3 action groups, the endpoint will evaluate what assets have access to the target asset via IAM permissions. Specifically the evaluation will inspect ACLs, SCPs, public access block config, attached policies, inline policies, applicable group policies, applicable resource policies, trust relationships and role chains. The response contains a list of User or Role assets that can access the target based on the discovered policies, along with role chains that expose access. In order to view the specific Statements, a call to analyse-specific-access access is required.

Language
Authorization
Header
URL
Click Try It! to start a request and see the response here!