AWS IAM Access Advisor Cheat Sheet

Prune unused permissions

Last Updated: November 21, 2025

Focus Areas

Focus
Pull last accessed insights per service
Document who approved revocations

Commands & Queries

aws iam generate-service-last-accessed-details --arn arn
Start report
aws iam get-service-last-accessed-details --job-id id
View usage
aws iam delete-policy-policy --policy-arn arn
Prune policies

Summary

Access Advisor trims IAM bloat while preserving functionality.

💡 Pro Tip: Automate monthly reviews and notify owners before revoking.
← Back to Security & Privacy | Browse all categories | View all cheat sheets