Help Center/ Identity and Access Management_Identity and Access Management (New Edition)/ User Guide/ Access Analyzer/ Setting Access Analyzers/ Creating a Best Practice Compliance Analyzer
Updated on 2025-11-07 GMT+08:00
View PDF
Share

Creating a Best Practice Compliance Analyzer

This section describes how to create an analyzer for best practice compliance. After an analyzer is created, IAM automatically scans resource configurations to detect those do not comply with security best practices and generates analysis results.

Notes and Constraints

Currently, IAM supports best practice compliance analyzers in the following regions:

CN-Hong Kong

Procedure

  1. Log in to the new IAM console.
  2. In the navigation pane, choose Access Analyzer > Analyzers Settings, and click Create Analyzer.

    Figure 1 Creating an access analyzer

  3. On the Create Analyzer page, select Best practice compliance for Analyzer Type in the Analysis area.

    Figure 2 Creating an analyzer for best practice compliance

  4. Enter an analyzer name.

    Figure 3 Entering an analyzer name

  5. Specify a zone of trust. The analyzer will scan configurations of all supported resources in the zone of trust. Currently, you can select only Current account as the zone of trust.
  6. (Optional) Add tags to the analyzer. Click Add in the Tags area and enter a tag key and tag value.
  7. Click OK. Go back to the access analyzer list to check the cerated analyzer.
Parent topic: Setting Access Analyzers