AWS IAM access monitor

Agent that monitors IAM roles, users and policies and flags any that have been inactive for set period of time

Agent to fetch and returns what users, policies, etc have access to specific services