The service can simulate or analyze the permissions an identity holds or has used, and can report which identities have access to a resource and whether that access is exercised.
Audit Tooling
CCC.IAM.CP18
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.IAM.TH07 | Identity Inherits Excessive Permissions Through Group Membership | An identity principal becomes a member of one or more IAM groups, and the combined policies of these groups grant permissions beyond what is necessary for the principal's function. This "privilege creep" through group inheritance complicates auditing and can lead to an identity having standing access to sensitive resources. |
| CCC.IAM.TH11 | Unused Credentials Remain Active | Unused IAM identity that is no longer needed or monitored remains active. Its compromise is less likely to be detected, and it represents a persistent, unnecessary attack surface. |