Previewing External Access in a Trust Agency

Constraints

• Currently, you can only preview and verify external access for IAM trust agencies.
• Currently, only account-level external analyzers support external access preview of IAM trust agencies.

Procedure

1. Log in to the new IAM console.
2. In the navigation pane, choose Agencies. Locate the target agency and click Modify in the Operation column.
   Figure 1 Modifying a trust agency
   

3. In the lower part of the Basic Information page, locate the Trust Policy tab and click Edit Trust Policy.
   Figure 2 Editing a trust policy
   

4. In the lower part corner of the displayed page, click Preview Access.
   Figure 3 Previewing external access
   

5. Select an analyzer in the Preview External Access area and click Preview.

   The access analyzer analyzes the policy and displays the findings of external access. You can adjust the trust policy based on the findings before saving the trust policy.

6. (Optional) Expand each finding to review the finding details and validate access.

   You can select from the following types of findings:

   • All: indicates all findings for external access after the trust policy is modified.
   • New: indicates that a finding for new external access would be introduced after the trust policy is modified.
   • Resolved: indicates that an active finding for external access would be resolved after the trust policy is modified.
   • Archived: indicates that a finding for new external access would be automatically archived based on the archive rules after the trust policy is modified.
   • Existing: indicates that a finding for external access would remain unchanged after the trust policy is modified.

7. Click OK.