Help Center/ Identity and Access Management_Identity and Access Management (New Edition)/ User Guide/ Access Analyzer/ Setting Access Analyzers/ Viewing the Findings Overview
Updated on 2025-11-07 GMT+08:00
View PDF
Share

Viewing the Findings Overview

IAM Access Analyzer provides an overview dashboard for all access findings. The dashboard allows you to view the findings of external access and unused access in your organization or account and identify accounts that need attention.

It may take some time to update the findings. The time required depends on the number of analyzed resources.

Findings of External Access

  1. Log in to the new IAM console.
  2. In the navigation pane, choose Access Analyzer > Overview.
  3. Specify the target analyzer in the upper left corner of the External Access Findings area.

    Figure 1 Viewing external access findings
    • Active Findings: includes the number of active findings for public access and cross-account or cross-organization access. Choose a number to list all of the active findings of each type.
    • Active Findings Overview: includes the details of active finding types. Click View All Active Findings to view the complete list of active findings for the analyzer's account or organization.
    • Major Resource Types with Active Findings: includes all the resource types with active findings. Currently, the following six resource types are supported: IAM, OBS, DEW, SWR, CBR, and IMS. Your analyzer might have active findings for other resources not listed here.

Findings of Unused Access

  1. Log in to the new IAM console.
  2. In the navigation pane, choose Access Analyzer > Overview.
  3. Specify the target analyzer in the upper left corner of the Unused Access Findings area.

    Figure 2 Viewing unused access findings
    Figure 3 Viewing accounts with the most findings for unused access
    • Active Findings: includes the number of active findings for unused credentials, agencies, trust agencies, and permissions in your account. Choose a number to list all of the active findings of each type.
    • Active Findings Overview: includes the details of active finding types. Click View All Active Findings to view the complete list of active findings for the analyzer's account or organization.
    • Finding Status: includes status (Active, Archived, and Resolved) of findings in your account or organization.
    • Accounts with the Most Findings for Unused Access is only displayed if the target analyzer you specified is at the organization level. It includes a breakdown of the accounts in your organization with the most active findings. Your analyzer might have active findings for other accounts not listed here.

Best Practice Compliance

  1. Log in to the new IAM console.
  2. In the navigation pane, choose Access Analyzer > Overview.
  3. Specify the target analyzer in the upper left corner of the Best Practice Compliance area.

    Figure 4 Best practice compliance
    • Active Findings: includes the number of each finding type. You can click a number to view all the findings of each type in a list.
    • Active Findings Overview: includes the count and percentage of each finding type. You can click each part of the ring chart to view the list of best practice compliance findings for each type. You can also click View All Active Findings to view all best practice compliance findings.
    • Findings Status: includes the count and percent of active, archived, and resolved findings. You can click each bar of the chart to view the list of best practice compliance findings in each status.

Parent topic: Setting Access Analyzers