Given the source ARN of User or Role and the ARN of an S3 Bucket, the endpoint will evaluate if the source asset has access to the target asset via IAM permissions. Specifically the evaluation will inspect attached policies, inline policies, applicable group policies, applicable resource policies and role chains. The response contains an IamAccessType detailing the access permitted to the target asset if any, along with statements and role chains involved in the decision.