policy security_error ai_generated true

IAM policy grants excessive permissions

ID: policy/iam-least-privilege-violation

Also available as: JSON · Markdown
82%Fix Rate
86%Confidence
3Evidence
2023-01-01First Seen

Version Compatibility

VersionStatusIntroducedDeprecatedNotes
any active — — —

Root Cause

IAM role/policy grants more permissions than needed.

generic

Workarounds

  1. 90% success Use IAM Access Analyzer to identify unused permissions
  2. 88% success Implement scoped policies with specific resource ARNs

Dead Ends

Common approaches that don't work:

  1. Remove all permissions and add back one by one 78% fail

    Service disruption during process

  2. Keep broad permissions to avoid breakage 82% fail

    Security risk